xref: /sqlite-3.40.0/src/wherecode.c (revision b88eaf16)
1 /*
2 ** 2015-06-06
3 **
4 ** The author disclaims copyright to this source code.  In place of
5 ** a legal notice, here is a blessing:
6 **
7 **    May you do good and not evil.
8 **    May you find forgiveness for yourself and forgive others.
9 **    May you share freely, never taking more than you give.
10 **
11 *************************************************************************
12 ** This module contains C code that generates VDBE code used to process
13 ** the WHERE clause of SQL statements.
14 **
15 ** This file was split off from where.c on 2015-06-06 in order to reduce the
16 ** size of where.c and make it easier to edit.  This file contains the routines
17 ** that actually generate the bulk of the WHERE loop code.  The original where.c
18 ** file retains the code that does query planning and analysis.
19 */
20 #include "sqliteInt.h"
21 #include "whereInt.h"
22 
23 #ifndef SQLITE_OMIT_EXPLAIN
24 
25 /*
26 ** Return the name of the i-th column of the pIdx index.
27 */
28 static const char *explainIndexColumnName(Index *pIdx, int i){
29   i = pIdx->aiColumn[i];
30   if( i==XN_EXPR ) return "<expr>";
31   if( i==XN_ROWID ) return "rowid";
32   return pIdx->pTable->aCol[i].zName;
33 }
34 
35 /*
36 ** This routine is a helper for explainIndexRange() below
37 **
38 ** pStr holds the text of an expression that we are building up one term
39 ** at a time.  This routine adds a new term to the end of the expression.
40 ** Terms are separated by AND so add the "AND" text for second and subsequent
41 ** terms only.
42 */
43 static void explainAppendTerm(
44   StrAccum *pStr,             /* The text expression being built */
45   Index *pIdx,                /* Index to read column names from */
46   int nTerm,                  /* Number of terms */
47   int iTerm,                  /* Zero-based index of first term. */
48   int bAnd,                   /* Non-zero to append " AND " */
49   const char *zOp             /* Name of the operator */
50 ){
51   int i;
52 
53   assert( nTerm>=1 );
54   if( bAnd ) sqlite3_str_append(pStr, " AND ", 5);
55 
56   if( nTerm>1 ) sqlite3_str_append(pStr, "(", 1);
57   for(i=0; i<nTerm; i++){
58     if( i ) sqlite3_str_append(pStr, ",", 1);
59     sqlite3_str_appendall(pStr, explainIndexColumnName(pIdx, iTerm+i));
60   }
61   if( nTerm>1 ) sqlite3_str_append(pStr, ")", 1);
62 
63   sqlite3_str_append(pStr, zOp, 1);
64 
65   if( nTerm>1 ) sqlite3_str_append(pStr, "(", 1);
66   for(i=0; i<nTerm; i++){
67     if( i ) sqlite3_str_append(pStr, ",", 1);
68     sqlite3_str_append(pStr, "?", 1);
69   }
70   if( nTerm>1 ) sqlite3_str_append(pStr, ")", 1);
71 }
72 
73 /*
74 ** Argument pLevel describes a strategy for scanning table pTab. This
75 ** function appends text to pStr that describes the subset of table
76 ** rows scanned by the strategy in the form of an SQL expression.
77 **
78 ** For example, if the query:
79 **
80 **   SELECT * FROM t1 WHERE a=1 AND b>2;
81 **
82 ** is run and there is an index on (a, b), then this function returns a
83 ** string similar to:
84 **
85 **   "a=? AND b>?"
86 */
87 static void explainIndexRange(StrAccum *pStr, WhereLoop *pLoop){
88   Index *pIndex = pLoop->u.btree.pIndex;
89   u16 nEq = pLoop->u.btree.nEq;
90   u16 nSkip = pLoop->nSkip;
91   int i, j;
92 
93   if( nEq==0 && (pLoop->wsFlags&(WHERE_BTM_LIMIT|WHERE_TOP_LIMIT))==0 ) return;
94   sqlite3_str_append(pStr, " (", 2);
95   for(i=0; i<nEq; i++){
96     const char *z = explainIndexColumnName(pIndex, i);
97     if( i ) sqlite3_str_append(pStr, " AND ", 5);
98     sqlite3_str_appendf(pStr, i>=nSkip ? "%s=?" : "ANY(%s)", z);
99   }
100 
101   j = i;
102   if( pLoop->wsFlags&WHERE_BTM_LIMIT ){
103     explainAppendTerm(pStr, pIndex, pLoop->u.btree.nBtm, j, i, ">");
104     i = 1;
105   }
106   if( pLoop->wsFlags&WHERE_TOP_LIMIT ){
107     explainAppendTerm(pStr, pIndex, pLoop->u.btree.nTop, j, i, "<");
108   }
109   sqlite3_str_append(pStr, ")", 1);
110 }
111 
112 /*
113 ** This function is a no-op unless currently processing an EXPLAIN QUERY PLAN
114 ** command, or if either SQLITE_DEBUG or SQLITE_ENABLE_STMT_SCANSTATUS was
115 ** defined at compile-time. If it is not a no-op, a single OP_Explain opcode
116 ** is added to the output to describe the table scan strategy in pLevel.
117 **
118 ** If an OP_Explain opcode is added to the VM, its address is returned.
119 ** Otherwise, if no OP_Explain is coded, zero is returned.
120 */
121 int sqlite3WhereExplainOneScan(
122   Parse *pParse,                  /* Parse context */
123   SrcList *pTabList,              /* Table list this loop refers to */
124   WhereLevel *pLevel,             /* Scan to write OP_Explain opcode for */
125   u16 wctrlFlags                  /* Flags passed to sqlite3WhereBegin() */
126 ){
127   int ret = 0;
128 #if !defined(SQLITE_DEBUG) && !defined(SQLITE_ENABLE_STMT_SCANSTATUS)
129   if( sqlite3ParseToplevel(pParse)->explain==2 )
130 #endif
131   {
132     struct SrcList_item *pItem = &pTabList->a[pLevel->iFrom];
133     Vdbe *v = pParse->pVdbe;      /* VM being constructed */
134     sqlite3 *db = pParse->db;     /* Database handle */
135     int isSearch;                 /* True for a SEARCH. False for SCAN. */
136     WhereLoop *pLoop;             /* The controlling WhereLoop object */
137     u32 flags;                    /* Flags that describe this loop */
138     char *zMsg;                   /* Text to add to EQP output */
139     StrAccum str;                 /* EQP output string */
140     char zBuf[100];               /* Initial space for EQP output string */
141 
142     pLoop = pLevel->pWLoop;
143     flags = pLoop->wsFlags;
144     if( (flags&WHERE_MULTI_OR) || (wctrlFlags&WHERE_OR_SUBCLAUSE) ) return 0;
145 
146     isSearch = (flags&(WHERE_BTM_LIMIT|WHERE_TOP_LIMIT))!=0
147             || ((flags&WHERE_VIRTUALTABLE)==0 && (pLoop->u.btree.nEq>0))
148             || (wctrlFlags&(WHERE_ORDERBY_MIN|WHERE_ORDERBY_MAX));
149 
150     sqlite3StrAccumInit(&str, db, zBuf, sizeof(zBuf), SQLITE_MAX_LENGTH);
151     sqlite3_str_appendall(&str, isSearch ? "SEARCH" : "SCAN");
152     if( pItem->pSelect ){
153       sqlite3_str_appendf(&str, " SUBQUERY %u", pItem->pSelect->selId);
154     }else{
155       sqlite3_str_appendf(&str, " TABLE %s", pItem->zName);
156     }
157 
158     if( pItem->zAlias ){
159       sqlite3_str_appendf(&str, " AS %s", pItem->zAlias);
160     }
161     if( (flags & (WHERE_IPK|WHERE_VIRTUALTABLE))==0 ){
162       const char *zFmt = 0;
163       Index *pIdx;
164 
165       assert( pLoop->u.btree.pIndex!=0 );
166       pIdx = pLoop->u.btree.pIndex;
167       assert( !(flags&WHERE_AUTO_INDEX) || (flags&WHERE_IDX_ONLY) );
168       if( !HasRowid(pItem->pTab) && IsPrimaryKeyIndex(pIdx) ){
169         if( isSearch ){
170           zFmt = "PRIMARY KEY";
171         }
172       }else if( flags & WHERE_PARTIALIDX ){
173         zFmt = "AUTOMATIC PARTIAL COVERING INDEX";
174       }else if( flags & WHERE_AUTO_INDEX ){
175         zFmt = "AUTOMATIC COVERING INDEX";
176       }else if( flags & WHERE_IDX_ONLY ){
177         zFmt = "COVERING INDEX %s";
178       }else{
179         zFmt = "INDEX %s";
180       }
181       if( zFmt ){
182         sqlite3_str_append(&str, " USING ", 7);
183         sqlite3_str_appendf(&str, zFmt, pIdx->zName);
184         explainIndexRange(&str, pLoop);
185       }
186     }else if( (flags & WHERE_IPK)!=0 && (flags & WHERE_CONSTRAINT)!=0 ){
187       const char *zRangeOp;
188       if( flags&(WHERE_COLUMN_EQ|WHERE_COLUMN_IN) ){
189         zRangeOp = "=";
190       }else if( (flags&WHERE_BOTH_LIMIT)==WHERE_BOTH_LIMIT ){
191         zRangeOp = ">? AND rowid<";
192       }else if( flags&WHERE_BTM_LIMIT ){
193         zRangeOp = ">";
194       }else{
195         assert( flags&WHERE_TOP_LIMIT);
196         zRangeOp = "<";
197       }
198       sqlite3_str_appendf(&str,
199           " USING INTEGER PRIMARY KEY (rowid%s?)",zRangeOp);
200     }
201 #ifndef SQLITE_OMIT_VIRTUALTABLE
202     else if( (flags & WHERE_VIRTUALTABLE)!=0 ){
203       sqlite3_str_appendf(&str, " VIRTUAL TABLE INDEX %d:%s",
204                   pLoop->u.vtab.idxNum, pLoop->u.vtab.idxStr);
205     }
206 #endif
207 #ifdef SQLITE_EXPLAIN_ESTIMATED_ROWS
208     if( pLoop->nOut>=10 ){
209       sqlite3_str_appendf(&str, " (~%llu rows)",
210              sqlite3LogEstToInt(pLoop->nOut));
211     }else{
212       sqlite3_str_append(&str, " (~1 row)", 9);
213     }
214 #endif
215     zMsg = sqlite3StrAccumFinish(&str);
216     sqlite3ExplainBreakpoint("",zMsg);
217     ret = sqlite3VdbeAddOp4(v, OP_Explain, sqlite3VdbeCurrentAddr(v),
218                             pParse->addrExplain, 0, zMsg,P4_DYNAMIC);
219   }
220   return ret;
221 }
222 #endif /* SQLITE_OMIT_EXPLAIN */
223 
224 #ifdef SQLITE_ENABLE_STMT_SCANSTATUS
225 /*
226 ** Configure the VM passed as the first argument with an
227 ** sqlite3_stmt_scanstatus() entry corresponding to the scan used to
228 ** implement level pLvl. Argument pSrclist is a pointer to the FROM
229 ** clause that the scan reads data from.
230 **
231 ** If argument addrExplain is not 0, it must be the address of an
232 ** OP_Explain instruction that describes the same loop.
233 */
234 void sqlite3WhereAddScanStatus(
235   Vdbe *v,                        /* Vdbe to add scanstatus entry to */
236   SrcList *pSrclist,              /* FROM clause pLvl reads data from */
237   WhereLevel *pLvl,               /* Level to add scanstatus() entry for */
238   int addrExplain                 /* Address of OP_Explain (or 0) */
239 ){
240   const char *zObj = 0;
241   WhereLoop *pLoop = pLvl->pWLoop;
242   if( (pLoop->wsFlags & WHERE_VIRTUALTABLE)==0  &&  pLoop->u.btree.pIndex!=0 ){
243     zObj = pLoop->u.btree.pIndex->zName;
244   }else{
245     zObj = pSrclist->a[pLvl->iFrom].zName;
246   }
247   sqlite3VdbeScanStatus(
248       v, addrExplain, pLvl->addrBody, pLvl->addrVisit, pLoop->nOut, zObj
249   );
250 }
251 #endif
252 
253 
254 /*
255 ** Disable a term in the WHERE clause.  Except, do not disable the term
256 ** if it controls a LEFT OUTER JOIN and it did not originate in the ON
257 ** or USING clause of that join.
258 **
259 ** Consider the term t2.z='ok' in the following queries:
260 **
261 **   (1)  SELECT * FROM t1 LEFT JOIN t2 ON t1.a=t2.x WHERE t2.z='ok'
262 **   (2)  SELECT * FROM t1 LEFT JOIN t2 ON t1.a=t2.x AND t2.z='ok'
263 **   (3)  SELECT * FROM t1, t2 WHERE t1.a=t2.x AND t2.z='ok'
264 **
265 ** The t2.z='ok' is disabled in the in (2) because it originates
266 ** in the ON clause.  The term is disabled in (3) because it is not part
267 ** of a LEFT OUTER JOIN.  In (1), the term is not disabled.
268 **
269 ** Disabling a term causes that term to not be tested in the inner loop
270 ** of the join.  Disabling is an optimization.  When terms are satisfied
271 ** by indices, we disable them to prevent redundant tests in the inner
272 ** loop.  We would get the correct results if nothing were ever disabled,
273 ** but joins might run a little slower.  The trick is to disable as much
274 ** as we can without disabling too much.  If we disabled in (1), we'd get
275 ** the wrong answer.  See ticket #813.
276 **
277 ** If all the children of a term are disabled, then that term is also
278 ** automatically disabled.  In this way, terms get disabled if derived
279 ** virtual terms are tested first.  For example:
280 **
281 **      x GLOB 'abc*' AND x>='abc' AND x<'acd'
282 **      \___________/     \______/     \_____/
283 **         parent          child1       child2
284 **
285 ** Only the parent term was in the original WHERE clause.  The child1
286 ** and child2 terms were added by the LIKE optimization.  If both of
287 ** the virtual child terms are valid, then testing of the parent can be
288 ** skipped.
289 **
290 ** Usually the parent term is marked as TERM_CODED.  But if the parent
291 ** term was originally TERM_LIKE, then the parent gets TERM_LIKECOND instead.
292 ** The TERM_LIKECOND marking indicates that the term should be coded inside
293 ** a conditional such that is only evaluated on the second pass of a
294 ** LIKE-optimization loop, when scanning BLOBs instead of strings.
295 */
296 static void disableTerm(WhereLevel *pLevel, WhereTerm *pTerm){
297   int nLoop = 0;
298   assert( pTerm!=0 );
299   while( (pTerm->wtFlags & TERM_CODED)==0
300       && (pLevel->iLeftJoin==0 || ExprHasProperty(pTerm->pExpr, EP_FromJoin))
301       && (pLevel->notReady & pTerm->prereqAll)==0
302   ){
303     if( nLoop && (pTerm->wtFlags & TERM_LIKE)!=0 ){
304       pTerm->wtFlags |= TERM_LIKECOND;
305     }else{
306       pTerm->wtFlags |= TERM_CODED;
307     }
308     if( pTerm->iParent<0 ) break;
309     pTerm = &pTerm->pWC->a[pTerm->iParent];
310     assert( pTerm!=0 );
311     pTerm->nChild--;
312     if( pTerm->nChild!=0 ) break;
313     nLoop++;
314   }
315 }
316 
317 /*
318 ** Code an OP_Affinity opcode to apply the column affinity string zAff
319 ** to the n registers starting at base.
320 **
321 ** As an optimization, SQLITE_AFF_BLOB and SQLITE_AFF_NONE entries (which
322 ** are no-ops) at the beginning and end of zAff are ignored.  If all entries
323 ** in zAff are SQLITE_AFF_BLOB or SQLITE_AFF_NONE, then no code gets generated.
324 **
325 ** This routine makes its own copy of zAff so that the caller is free
326 ** to modify zAff after this routine returns.
327 */
328 static void codeApplyAffinity(Parse *pParse, int base, int n, char *zAff){
329   Vdbe *v = pParse->pVdbe;
330   if( zAff==0 ){
331     assert( pParse->db->mallocFailed );
332     return;
333   }
334   assert( v!=0 );
335 
336   /* Adjust base and n to skip over SQLITE_AFF_BLOB and SQLITE_AFF_NONE
337   ** entries at the beginning and end of the affinity string.
338   */
339   assert( SQLITE_AFF_NONE<SQLITE_AFF_BLOB );
340   while( n>0 && zAff[0]<=SQLITE_AFF_BLOB ){
341     n--;
342     base++;
343     zAff++;
344   }
345   while( n>1 && zAff[n-1]<=SQLITE_AFF_BLOB ){
346     n--;
347   }
348 
349   /* Code the OP_Affinity opcode if there is anything left to do. */
350   if( n>0 ){
351     sqlite3VdbeAddOp4(v, OP_Affinity, base, n, 0, zAff, n);
352   }
353 }
354 
355 /*
356 ** Expression pRight, which is the RHS of a comparison operation, is
357 ** either a vector of n elements or, if n==1, a scalar expression.
358 ** Before the comparison operation, affinity zAff is to be applied
359 ** to the pRight values. This function modifies characters within the
360 ** affinity string to SQLITE_AFF_BLOB if either:
361 **
362 **   * the comparison will be performed with no affinity, or
363 **   * the affinity change in zAff is guaranteed not to change the value.
364 */
365 static void updateRangeAffinityStr(
366   Expr *pRight,                   /* RHS of comparison */
367   int n,                          /* Number of vector elements in comparison */
368   char *zAff                      /* Affinity string to modify */
369 ){
370   int i;
371   for(i=0; i<n; i++){
372     Expr *p = sqlite3VectorFieldSubexpr(pRight, i);
373     if( sqlite3CompareAffinity(p, zAff[i])==SQLITE_AFF_BLOB
374      || sqlite3ExprNeedsNoAffinityChange(p, zAff[i])
375     ){
376       zAff[i] = SQLITE_AFF_BLOB;
377     }
378   }
379 }
380 
381 
382 /*
383 ** pX is an expression of the form:  (vector) IN (SELECT ...)
384 ** In other words, it is a vector IN operator with a SELECT clause on the
385 ** LHS.  But not all terms in the vector are indexable and the terms might
386 ** not be in the correct order for indexing.
387 **
388 ** This routine makes a copy of the input pX expression and then adjusts
389 ** the vector on the LHS with corresponding changes to the SELECT so that
390 ** the vector contains only index terms and those terms are in the correct
391 ** order.  The modified IN expression is returned.  The caller is responsible
392 ** for deleting the returned expression.
393 **
394 ** Example:
395 **
396 **    CREATE TABLE t1(a,b,c,d,e,f);
397 **    CREATE INDEX t1x1 ON t1(e,c);
398 **    SELECT * FROM t1 WHERE (a,b,c,d,e) IN (SELECT v,w,x,y,z FROM t2)
399 **                           \_______________________________________/
400 **                                     The pX expression
401 **
402 ** Since only columns e and c can be used with the index, in that order,
403 ** the modified IN expression that is returned will be:
404 **
405 **        (e,c) IN (SELECT z,x FROM t2)
406 **
407 ** The reduced pX is different from the original (obviously) and thus is
408 ** only used for indexing, to improve performance.  The original unaltered
409 ** IN expression must also be run on each output row for correctness.
410 */
411 static Expr *removeUnindexableInClauseTerms(
412   Parse *pParse,        /* The parsing context */
413   int iEq,              /* Look at loop terms starting here */
414   WhereLoop *pLoop,     /* The current loop */
415   Expr *pX              /* The IN expression to be reduced */
416 ){
417   sqlite3 *db = pParse->db;
418   Expr *pNew = sqlite3ExprDup(db, pX, 0);
419   if( db->mallocFailed==0 ){
420     ExprList *pOrigRhs = pNew->x.pSelect->pEList;  /* Original unmodified RHS */
421     ExprList *pOrigLhs = pNew->pLeft->x.pList;     /* Original unmodified LHS */
422     ExprList *pRhs = 0;         /* New RHS after modifications */
423     ExprList *pLhs = 0;         /* New LHS after mods */
424     int i;                      /* Loop counter */
425     Select *pSelect;            /* Pointer to the SELECT on the RHS */
426 
427     for(i=iEq; i<pLoop->nLTerm; i++){
428       if( pLoop->aLTerm[i]->pExpr==pX ){
429         int iField = pLoop->aLTerm[i]->iField - 1;
430         if( pOrigRhs->a[iField].pExpr==0 ) continue; /* Duplicate PK column */
431         pRhs = sqlite3ExprListAppend(pParse, pRhs, pOrigRhs->a[iField].pExpr);
432         pOrigRhs->a[iField].pExpr = 0;
433         assert( pOrigLhs->a[iField].pExpr!=0 );
434         pLhs = sqlite3ExprListAppend(pParse, pLhs, pOrigLhs->a[iField].pExpr);
435         pOrigLhs->a[iField].pExpr = 0;
436       }
437     }
438     sqlite3ExprListDelete(db, pOrigRhs);
439     sqlite3ExprListDelete(db, pOrigLhs);
440     pNew->pLeft->x.pList = pLhs;
441     pNew->x.pSelect->pEList = pRhs;
442     if( pLhs && pLhs->nExpr==1 ){
443       /* Take care here not to generate a TK_VECTOR containing only a
444       ** single value. Since the parser never creates such a vector, some
445       ** of the subroutines do not handle this case.  */
446       Expr *p = pLhs->a[0].pExpr;
447       pLhs->a[0].pExpr = 0;
448       sqlite3ExprDelete(db, pNew->pLeft);
449       pNew->pLeft = p;
450     }
451     pSelect = pNew->x.pSelect;
452     if( pSelect->pOrderBy ){
453       /* If the SELECT statement has an ORDER BY clause, zero the
454       ** iOrderByCol variables. These are set to non-zero when an
455       ** ORDER BY term exactly matches one of the terms of the
456       ** result-set. Since the result-set of the SELECT statement may
457       ** have been modified or reordered, these variables are no longer
458       ** set correctly.  Since setting them is just an optimization,
459       ** it's easiest just to zero them here.  */
460       ExprList *pOrderBy = pSelect->pOrderBy;
461       for(i=0; i<pOrderBy->nExpr; i++){
462         pOrderBy->a[i].u.x.iOrderByCol = 0;
463       }
464     }
465 
466 #if 0
467     printf("For indexing, change the IN expr:\n");
468     sqlite3TreeViewExpr(0, pX, 0);
469     printf("Into:\n");
470     sqlite3TreeViewExpr(0, pNew, 0);
471 #endif
472   }
473   return pNew;
474 }
475 
476 
477 /*
478 ** Generate code for a single equality term of the WHERE clause.  An equality
479 ** term can be either X=expr or X IN (...).   pTerm is the term to be
480 ** coded.
481 **
482 ** The current value for the constraint is left in a register, the index
483 ** of which is returned.  An attempt is made store the result in iTarget but
484 ** this is only guaranteed for TK_ISNULL and TK_IN constraints.  If the
485 ** constraint is a TK_EQ or TK_IS, then the current value might be left in
486 ** some other register and it is the caller's responsibility to compensate.
487 **
488 ** For a constraint of the form X=expr, the expression is evaluated in
489 ** straight-line code.  For constraints of the form X IN (...)
490 ** this routine sets up a loop that will iterate over all values of X.
491 */
492 static int codeEqualityTerm(
493   Parse *pParse,      /* The parsing context */
494   WhereTerm *pTerm,   /* The term of the WHERE clause to be coded */
495   WhereLevel *pLevel, /* The level of the FROM clause we are working on */
496   int iEq,            /* Index of the equality term within this level */
497   int bRev,           /* True for reverse-order IN operations */
498   int iTarget         /* Attempt to leave results in this register */
499 ){
500   Expr *pX = pTerm->pExpr;
501   Vdbe *v = pParse->pVdbe;
502   int iReg;                  /* Register holding results */
503 
504   assert( pLevel->pWLoop->aLTerm[iEq]==pTerm );
505   assert( iTarget>0 );
506   if( pX->op==TK_EQ || pX->op==TK_IS ){
507     iReg = sqlite3ExprCodeTarget(pParse, pX->pRight, iTarget);
508   }else if( pX->op==TK_ISNULL ){
509     iReg = iTarget;
510     sqlite3VdbeAddOp2(v, OP_Null, 0, iReg);
511 #ifndef SQLITE_OMIT_SUBQUERY
512   }else{
513     int eType = IN_INDEX_NOOP;
514     int iTab;
515     struct InLoop *pIn;
516     WhereLoop *pLoop = pLevel->pWLoop;
517     int i;
518     int nEq = 0;
519     int *aiMap = 0;
520 
521     if( (pLoop->wsFlags & WHERE_VIRTUALTABLE)==0
522       && pLoop->u.btree.pIndex!=0
523       && pLoop->u.btree.pIndex->aSortOrder[iEq]
524     ){
525       testcase( iEq==0 );
526       testcase( bRev );
527       bRev = !bRev;
528     }
529     assert( pX->op==TK_IN );
530     iReg = iTarget;
531 
532     for(i=0; i<iEq; i++){
533       if( pLoop->aLTerm[i] && pLoop->aLTerm[i]->pExpr==pX ){
534         disableTerm(pLevel, pTerm);
535         return iTarget;
536       }
537     }
538     for(i=iEq;i<pLoop->nLTerm; i++){
539       assert( pLoop->aLTerm[i]!=0 );
540       if( pLoop->aLTerm[i]->pExpr==pX ) nEq++;
541     }
542 
543     iTab = 0;
544     if( (pX->flags & EP_xIsSelect)==0 || pX->x.pSelect->pEList->nExpr==1 ){
545       eType = sqlite3FindInIndex(pParse, pX, IN_INDEX_LOOP, 0, 0, &iTab);
546     }else{
547       sqlite3 *db = pParse->db;
548       pX = removeUnindexableInClauseTerms(pParse, iEq, pLoop, pX);
549 
550       if( !db->mallocFailed ){
551         aiMap = (int*)sqlite3DbMallocZero(pParse->db, sizeof(int)*nEq);
552         eType = sqlite3FindInIndex(pParse, pX, IN_INDEX_LOOP, 0, aiMap, &iTab);
553         pTerm->pExpr->iTable = iTab;
554       }
555       sqlite3ExprDelete(db, pX);
556       pX = pTerm->pExpr;
557     }
558 
559     if( eType==IN_INDEX_INDEX_DESC ){
560       testcase( bRev );
561       bRev = !bRev;
562     }
563     sqlite3VdbeAddOp2(v, bRev ? OP_Last : OP_Rewind, iTab, 0);
564     VdbeCoverageIf(v, bRev);
565     VdbeCoverageIf(v, !bRev);
566     assert( (pLoop->wsFlags & WHERE_MULTI_OR)==0 );
567 
568     pLoop->wsFlags |= WHERE_IN_ABLE;
569     if( pLevel->u.in.nIn==0 ){
570       pLevel->addrNxt = sqlite3VdbeMakeLabel(pParse);
571     }
572 
573     i = pLevel->u.in.nIn;
574     pLevel->u.in.nIn += nEq;
575     pLevel->u.in.aInLoop =
576        sqlite3DbReallocOrFree(pParse->db, pLevel->u.in.aInLoop,
577                               sizeof(pLevel->u.in.aInLoop[0])*pLevel->u.in.nIn);
578     pIn = pLevel->u.in.aInLoop;
579     if( pIn ){
580       int iMap = 0;               /* Index in aiMap[] */
581       pIn += i;
582       for(i=iEq;i<pLoop->nLTerm; i++){
583         if( pLoop->aLTerm[i]->pExpr==pX ){
584           int iOut = iReg + i - iEq;
585           if( eType==IN_INDEX_ROWID ){
586             pIn->addrInTop = sqlite3VdbeAddOp2(v, OP_Rowid, iTab, iOut);
587           }else{
588             int iCol = aiMap ? aiMap[iMap++] : 0;
589             pIn->addrInTop = sqlite3VdbeAddOp3(v,OP_Column,iTab, iCol, iOut);
590           }
591           sqlite3VdbeAddOp1(v, OP_IsNull, iOut); VdbeCoverage(v);
592           if( i==iEq ){
593             pIn->iCur = iTab;
594             pIn->eEndLoopOp = bRev ? OP_Prev : OP_Next;
595             if( iEq>0 && (pLoop->wsFlags & WHERE_VIRTUALTABLE)==0 ){
596               pIn->iBase = iReg - i;
597               pIn->nPrefix = i;
598               pLoop->wsFlags |= WHERE_IN_EARLYOUT;
599             }else{
600               pIn->nPrefix = 0;
601             }
602           }else{
603             pIn->eEndLoopOp = OP_Noop;
604           }
605           pIn++;
606         }
607       }
608     }else{
609       pLevel->u.in.nIn = 0;
610     }
611     sqlite3DbFree(pParse->db, aiMap);
612 #endif
613   }
614   disableTerm(pLevel, pTerm);
615   return iReg;
616 }
617 
618 /*
619 ** Generate code that will evaluate all == and IN constraints for an
620 ** index scan.
621 **
622 ** For example, consider table t1(a,b,c,d,e,f) with index i1(a,b,c).
623 ** Suppose the WHERE clause is this:  a==5 AND b IN (1,2,3) AND c>5 AND c<10
624 ** The index has as many as three equality constraints, but in this
625 ** example, the third "c" value is an inequality.  So only two
626 ** constraints are coded.  This routine will generate code to evaluate
627 ** a==5 and b IN (1,2,3).  The current values for a and b will be stored
628 ** in consecutive registers and the index of the first register is returned.
629 **
630 ** In the example above nEq==2.  But this subroutine works for any value
631 ** of nEq including 0.  If nEq==0, this routine is nearly a no-op.
632 ** The only thing it does is allocate the pLevel->iMem memory cell and
633 ** compute the affinity string.
634 **
635 ** The nExtraReg parameter is 0 or 1.  It is 0 if all WHERE clause constraints
636 ** are == or IN and are covered by the nEq.  nExtraReg is 1 if there is
637 ** an inequality constraint (such as the "c>=5 AND c<10" in the example) that
638 ** occurs after the nEq quality constraints.
639 **
640 ** This routine allocates a range of nEq+nExtraReg memory cells and returns
641 ** the index of the first memory cell in that range. The code that
642 ** calls this routine will use that memory range to store keys for
643 ** start and termination conditions of the loop.
644 ** key value of the loop.  If one or more IN operators appear, then
645 ** this routine allocates an additional nEq memory cells for internal
646 ** use.
647 **
648 ** Before returning, *pzAff is set to point to a buffer containing a
649 ** copy of the column affinity string of the index allocated using
650 ** sqlite3DbMalloc(). Except, entries in the copy of the string associated
651 ** with equality constraints that use BLOB or NONE affinity are set to
652 ** SQLITE_AFF_BLOB. This is to deal with SQL such as the following:
653 **
654 **   CREATE TABLE t1(a TEXT PRIMARY KEY, b);
655 **   SELECT ... FROM t1 AS t2, t1 WHERE t1.a = t2.b;
656 **
657 ** In the example above, the index on t1(a) has TEXT affinity. But since
658 ** the right hand side of the equality constraint (t2.b) has BLOB/NONE affinity,
659 ** no conversion should be attempted before using a t2.b value as part of
660 ** a key to search the index. Hence the first byte in the returned affinity
661 ** string in this example would be set to SQLITE_AFF_BLOB.
662 */
663 static int codeAllEqualityTerms(
664   Parse *pParse,        /* Parsing context */
665   WhereLevel *pLevel,   /* Which nested loop of the FROM we are coding */
666   int bRev,             /* Reverse the order of IN operators */
667   int nExtraReg,        /* Number of extra registers to allocate */
668   char **pzAff          /* OUT: Set to point to affinity string */
669 ){
670   u16 nEq;                      /* The number of == or IN constraints to code */
671   u16 nSkip;                    /* Number of left-most columns to skip */
672   Vdbe *v = pParse->pVdbe;      /* The vm under construction */
673   Index *pIdx;                  /* The index being used for this loop */
674   WhereTerm *pTerm;             /* A single constraint term */
675   WhereLoop *pLoop;             /* The WhereLoop object */
676   int j;                        /* Loop counter */
677   int regBase;                  /* Base register */
678   int nReg;                     /* Number of registers to allocate */
679   char *zAff;                   /* Affinity string to return */
680 
681   /* This module is only called on query plans that use an index. */
682   pLoop = pLevel->pWLoop;
683   assert( (pLoop->wsFlags & WHERE_VIRTUALTABLE)==0 );
684   nEq = pLoop->u.btree.nEq;
685   nSkip = pLoop->nSkip;
686   pIdx = pLoop->u.btree.pIndex;
687   assert( pIdx!=0 );
688 
689   /* Figure out how many memory cells we will need then allocate them.
690   */
691   regBase = pParse->nMem + 1;
692   nReg = pLoop->u.btree.nEq + nExtraReg;
693   pParse->nMem += nReg;
694 
695   zAff = sqlite3DbStrDup(pParse->db,sqlite3IndexAffinityStr(pParse->db,pIdx));
696   assert( zAff!=0 || pParse->db->mallocFailed );
697 
698   if( nSkip ){
699     int iIdxCur = pLevel->iIdxCur;
700     sqlite3VdbeAddOp1(v, (bRev?OP_Last:OP_Rewind), iIdxCur);
701     VdbeCoverageIf(v, bRev==0);
702     VdbeCoverageIf(v, bRev!=0);
703     VdbeComment((v, "begin skip-scan on %s", pIdx->zName));
704     j = sqlite3VdbeAddOp0(v, OP_Goto);
705     pLevel->addrSkip = sqlite3VdbeAddOp4Int(v, (bRev?OP_SeekLT:OP_SeekGT),
706                             iIdxCur, 0, regBase, nSkip);
707     VdbeCoverageIf(v, bRev==0);
708     VdbeCoverageIf(v, bRev!=0);
709     sqlite3VdbeJumpHere(v, j);
710     for(j=0; j<nSkip; j++){
711       sqlite3VdbeAddOp3(v, OP_Column, iIdxCur, j, regBase+j);
712       testcase( pIdx->aiColumn[j]==XN_EXPR );
713       VdbeComment((v, "%s", explainIndexColumnName(pIdx, j)));
714     }
715   }
716 
717   /* Evaluate the equality constraints
718   */
719   assert( zAff==0 || (int)strlen(zAff)>=nEq );
720   for(j=nSkip; j<nEq; j++){
721     int r1;
722     pTerm = pLoop->aLTerm[j];
723     assert( pTerm!=0 );
724     /* The following testcase is true for indices with redundant columns.
725     ** Ex: CREATE INDEX i1 ON t1(a,b,a); SELECT * FROM t1 WHERE a=0 AND b=0; */
726     testcase( (pTerm->wtFlags & TERM_CODED)!=0 );
727     testcase( pTerm->wtFlags & TERM_VIRTUAL );
728     r1 = codeEqualityTerm(pParse, pTerm, pLevel, j, bRev, regBase+j);
729     if( r1!=regBase+j ){
730       if( nReg==1 ){
731         sqlite3ReleaseTempReg(pParse, regBase);
732         regBase = r1;
733       }else{
734         sqlite3VdbeAddOp2(v, OP_SCopy, r1, regBase+j);
735       }
736     }
737     if( pTerm->eOperator & WO_IN ){
738       if( pTerm->pExpr->flags & EP_xIsSelect ){
739         /* No affinity ever needs to be (or should be) applied to a value
740         ** from the RHS of an "? IN (SELECT ...)" expression. The
741         ** sqlite3FindInIndex() routine has already ensured that the
742         ** affinity of the comparison has been applied to the value.  */
743         if( zAff ) zAff[j] = SQLITE_AFF_BLOB;
744       }
745     }else if( (pTerm->eOperator & WO_ISNULL)==0 ){
746       Expr *pRight = pTerm->pExpr->pRight;
747       if( (pTerm->wtFlags & TERM_IS)==0 && sqlite3ExprCanBeNull(pRight) ){
748         sqlite3VdbeAddOp2(v, OP_IsNull, regBase+j, pLevel->addrBrk);
749         VdbeCoverage(v);
750       }
751       if( zAff ){
752         if( sqlite3CompareAffinity(pRight, zAff[j])==SQLITE_AFF_BLOB ){
753           zAff[j] = SQLITE_AFF_BLOB;
754         }
755         if( sqlite3ExprNeedsNoAffinityChange(pRight, zAff[j]) ){
756           zAff[j] = SQLITE_AFF_BLOB;
757         }
758       }
759     }
760   }
761   *pzAff = zAff;
762   return regBase;
763 }
764 
765 #ifndef SQLITE_LIKE_DOESNT_MATCH_BLOBS
766 /*
767 ** If the most recently coded instruction is a constant range constraint
768 ** (a string literal) that originated from the LIKE optimization, then
769 ** set P3 and P5 on the OP_String opcode so that the string will be cast
770 ** to a BLOB at appropriate times.
771 **
772 ** The LIKE optimization trys to evaluate "x LIKE 'abc%'" as a range
773 ** expression: "x>='ABC' AND x<'abd'".  But this requires that the range
774 ** scan loop run twice, once for strings and a second time for BLOBs.
775 ** The OP_String opcodes on the second pass convert the upper and lower
776 ** bound string constants to blobs.  This routine makes the necessary changes
777 ** to the OP_String opcodes for that to happen.
778 **
779 ** Except, of course, if SQLITE_LIKE_DOESNT_MATCH_BLOBS is defined, then
780 ** only the one pass through the string space is required, so this routine
781 ** becomes a no-op.
782 */
783 static void whereLikeOptimizationStringFixup(
784   Vdbe *v,                /* prepared statement under construction */
785   WhereLevel *pLevel,     /* The loop that contains the LIKE operator */
786   WhereTerm *pTerm        /* The upper or lower bound just coded */
787 ){
788   if( pTerm->wtFlags & TERM_LIKEOPT ){
789     VdbeOp *pOp;
790     assert( pLevel->iLikeRepCntr>0 );
791     pOp = sqlite3VdbeGetOp(v, -1);
792     assert( pOp!=0 );
793     assert( pOp->opcode==OP_String8
794             || pTerm->pWC->pWInfo->pParse->db->mallocFailed );
795     pOp->p3 = (int)(pLevel->iLikeRepCntr>>1);  /* Register holding counter */
796     pOp->p5 = (u8)(pLevel->iLikeRepCntr&1);    /* ASC or DESC */
797   }
798 }
799 #else
800 # define whereLikeOptimizationStringFixup(A,B,C)
801 #endif
802 
803 #ifdef SQLITE_ENABLE_CURSOR_HINTS
804 /*
805 ** Information is passed from codeCursorHint() down to individual nodes of
806 ** the expression tree (by sqlite3WalkExpr()) using an instance of this
807 ** structure.
808 */
809 struct CCurHint {
810   int iTabCur;    /* Cursor for the main table */
811   int iIdxCur;    /* Cursor for the index, if pIdx!=0.  Unused otherwise */
812   Index *pIdx;    /* The index used to access the table */
813 };
814 
815 /*
816 ** This function is called for every node of an expression that is a candidate
817 ** for a cursor hint on an index cursor.  For TK_COLUMN nodes that reference
818 ** the table CCurHint.iTabCur, verify that the same column can be
819 ** accessed through the index.  If it cannot, then set pWalker->eCode to 1.
820 */
821 static int codeCursorHintCheckExpr(Walker *pWalker, Expr *pExpr){
822   struct CCurHint *pHint = pWalker->u.pCCurHint;
823   assert( pHint->pIdx!=0 );
824   if( pExpr->op==TK_COLUMN
825    && pExpr->iTable==pHint->iTabCur
826    && sqlite3TableColumnToIndex(pHint->pIdx, pExpr->iColumn)<0
827   ){
828     pWalker->eCode = 1;
829   }
830   return WRC_Continue;
831 }
832 
833 /*
834 ** Test whether or not expression pExpr, which was part of a WHERE clause,
835 ** should be included in the cursor-hint for a table that is on the rhs
836 ** of a LEFT JOIN. Set Walker.eCode to non-zero before returning if the
837 ** expression is not suitable.
838 **
839 ** An expression is unsuitable if it might evaluate to non NULL even if
840 ** a TK_COLUMN node that does affect the value of the expression is set
841 ** to NULL. For example:
842 **
843 **   col IS NULL
844 **   col IS NOT NULL
845 **   coalesce(col, 1)
846 **   CASE WHEN col THEN 0 ELSE 1 END
847 */
848 static int codeCursorHintIsOrFunction(Walker *pWalker, Expr *pExpr){
849   if( pExpr->op==TK_IS
850    || pExpr->op==TK_ISNULL || pExpr->op==TK_ISNOT
851    || pExpr->op==TK_NOTNULL || pExpr->op==TK_CASE
852   ){
853     pWalker->eCode = 1;
854   }else if( pExpr->op==TK_FUNCTION ){
855     int d1;
856     char d2[4];
857     if( 0==sqlite3IsLikeFunction(pWalker->pParse->db, pExpr, &d1, d2) ){
858       pWalker->eCode = 1;
859     }
860   }
861 
862   return WRC_Continue;
863 }
864 
865 
866 /*
867 ** This function is called on every node of an expression tree used as an
868 ** argument to the OP_CursorHint instruction. If the node is a TK_COLUMN
869 ** that accesses any table other than the one identified by
870 ** CCurHint.iTabCur, then do the following:
871 **
872 **   1) allocate a register and code an OP_Column instruction to read
873 **      the specified column into the new register, and
874 **
875 **   2) transform the expression node to a TK_REGISTER node that reads
876 **      from the newly populated register.
877 **
878 ** Also, if the node is a TK_COLUMN that does access the table idenified
879 ** by pCCurHint.iTabCur, and an index is being used (which we will
880 ** know because CCurHint.pIdx!=0) then transform the TK_COLUMN into
881 ** an access of the index rather than the original table.
882 */
883 static int codeCursorHintFixExpr(Walker *pWalker, Expr *pExpr){
884   int rc = WRC_Continue;
885   struct CCurHint *pHint = pWalker->u.pCCurHint;
886   if( pExpr->op==TK_COLUMN ){
887     if( pExpr->iTable!=pHint->iTabCur ){
888       int reg = ++pWalker->pParse->nMem;   /* Register for column value */
889       sqlite3ExprCode(pWalker->pParse, pExpr, reg);
890       pExpr->op = TK_REGISTER;
891       pExpr->iTable = reg;
892     }else if( pHint->pIdx!=0 ){
893       pExpr->iTable = pHint->iIdxCur;
894       pExpr->iColumn = sqlite3TableColumnToIndex(pHint->pIdx, pExpr->iColumn);
895       assert( pExpr->iColumn>=0 );
896     }
897   }else if( pExpr->op==TK_AGG_FUNCTION ){
898     /* An aggregate function in the WHERE clause of a query means this must
899     ** be a correlated sub-query, and expression pExpr is an aggregate from
900     ** the parent context. Do not walk the function arguments in this case.
901     **
902     ** todo: It should be possible to replace this node with a TK_REGISTER
903     ** expression, as the result of the expression must be stored in a
904     ** register at this point. The same holds for TK_AGG_COLUMN nodes. */
905     rc = WRC_Prune;
906   }
907   return rc;
908 }
909 
910 /*
911 ** Insert an OP_CursorHint instruction if it is appropriate to do so.
912 */
913 static void codeCursorHint(
914   struct SrcList_item *pTabItem,  /* FROM clause item */
915   WhereInfo *pWInfo,    /* The where clause */
916   WhereLevel *pLevel,   /* Which loop to provide hints for */
917   WhereTerm *pEndRange  /* Hint this end-of-scan boundary term if not NULL */
918 ){
919   Parse *pParse = pWInfo->pParse;
920   sqlite3 *db = pParse->db;
921   Vdbe *v = pParse->pVdbe;
922   Expr *pExpr = 0;
923   WhereLoop *pLoop = pLevel->pWLoop;
924   int iCur;
925   WhereClause *pWC;
926   WhereTerm *pTerm;
927   int i, j;
928   struct CCurHint sHint;
929   Walker sWalker;
930 
931   if( OptimizationDisabled(db, SQLITE_CursorHints) ) return;
932   iCur = pLevel->iTabCur;
933   assert( iCur==pWInfo->pTabList->a[pLevel->iFrom].iCursor );
934   sHint.iTabCur = iCur;
935   sHint.iIdxCur = pLevel->iIdxCur;
936   sHint.pIdx = pLoop->u.btree.pIndex;
937   memset(&sWalker, 0, sizeof(sWalker));
938   sWalker.pParse = pParse;
939   sWalker.u.pCCurHint = &sHint;
940   pWC = &pWInfo->sWC;
941   for(i=0; i<pWC->nTerm; i++){
942     pTerm = &pWC->a[i];
943     if( pTerm->wtFlags & (TERM_VIRTUAL|TERM_CODED) ) continue;
944     if( pTerm->prereqAll & pLevel->notReady ) continue;
945 
946     /* Any terms specified as part of the ON(...) clause for any LEFT
947     ** JOIN for which the current table is not the rhs are omitted
948     ** from the cursor-hint.
949     **
950     ** If this table is the rhs of a LEFT JOIN, "IS" or "IS NULL" terms
951     ** that were specified as part of the WHERE clause must be excluded.
952     ** This is to address the following:
953     **
954     **   SELECT ... t1 LEFT JOIN t2 ON (t1.a=t2.b) WHERE t2.c IS NULL;
955     **
956     ** Say there is a single row in t2 that matches (t1.a=t2.b), but its
957     ** t2.c values is not NULL. If the (t2.c IS NULL) constraint is
958     ** pushed down to the cursor, this row is filtered out, causing
959     ** SQLite to synthesize a row of NULL values. Which does match the
960     ** WHERE clause, and so the query returns a row. Which is incorrect.
961     **
962     ** For the same reason, WHERE terms such as:
963     **
964     **   WHERE 1 = (t2.c IS NULL)
965     **
966     ** are also excluded. See codeCursorHintIsOrFunction() for details.
967     */
968     if( pTabItem->fg.jointype & JT_LEFT ){
969       Expr *pExpr = pTerm->pExpr;
970       if( !ExprHasProperty(pExpr, EP_FromJoin)
971        || pExpr->iRightJoinTable!=pTabItem->iCursor
972       ){
973         sWalker.eCode = 0;
974         sWalker.xExprCallback = codeCursorHintIsOrFunction;
975         sqlite3WalkExpr(&sWalker, pTerm->pExpr);
976         if( sWalker.eCode ) continue;
977       }
978     }else{
979       if( ExprHasProperty(pTerm->pExpr, EP_FromJoin) ) continue;
980     }
981 
982     /* All terms in pWLoop->aLTerm[] except pEndRange are used to initialize
983     ** the cursor.  These terms are not needed as hints for a pure range
984     ** scan (that has no == terms) so omit them. */
985     if( pLoop->u.btree.nEq==0 && pTerm!=pEndRange ){
986       for(j=0; j<pLoop->nLTerm && pLoop->aLTerm[j]!=pTerm; j++){}
987       if( j<pLoop->nLTerm ) continue;
988     }
989 
990     /* No subqueries or non-deterministic functions allowed */
991     if( sqlite3ExprContainsSubquery(pTerm->pExpr) ) continue;
992 
993     /* For an index scan, make sure referenced columns are actually in
994     ** the index. */
995     if( sHint.pIdx!=0 ){
996       sWalker.eCode = 0;
997       sWalker.xExprCallback = codeCursorHintCheckExpr;
998       sqlite3WalkExpr(&sWalker, pTerm->pExpr);
999       if( sWalker.eCode ) continue;
1000     }
1001 
1002     /* If we survive all prior tests, that means this term is worth hinting */
1003     pExpr = sqlite3ExprAnd(pParse, pExpr, sqlite3ExprDup(db, pTerm->pExpr, 0));
1004   }
1005   if( pExpr!=0 ){
1006     sWalker.xExprCallback = codeCursorHintFixExpr;
1007     sqlite3WalkExpr(&sWalker, pExpr);
1008     sqlite3VdbeAddOp4(v, OP_CursorHint,
1009                       (sHint.pIdx ? sHint.iIdxCur : sHint.iTabCur), 0, 0,
1010                       (const char*)pExpr, P4_EXPR);
1011   }
1012 }
1013 #else
1014 # define codeCursorHint(A,B,C,D)  /* No-op */
1015 #endif /* SQLITE_ENABLE_CURSOR_HINTS */
1016 
1017 /*
1018 ** Cursor iCur is open on an intkey b-tree (a table). Register iRowid contains
1019 ** a rowid value just read from cursor iIdxCur, open on index pIdx. This
1020 ** function generates code to do a deferred seek of cursor iCur to the
1021 ** rowid stored in register iRowid.
1022 **
1023 ** Normally, this is just:
1024 **
1025 **   OP_DeferredSeek $iCur $iRowid
1026 **
1027 ** However, if the scan currently being coded is a branch of an OR-loop and
1028 ** the statement currently being coded is a SELECT, then P3 of OP_DeferredSeek
1029 ** is set to iIdxCur and P4 is set to point to an array of integers
1030 ** containing one entry for each column of the table cursor iCur is open
1031 ** on. For each table column, if the column is the i'th column of the
1032 ** index, then the corresponding array entry is set to (i+1). If the column
1033 ** does not appear in the index at all, the array entry is set to 0.
1034 */
1035 static void codeDeferredSeek(
1036   WhereInfo *pWInfo,              /* Where clause context */
1037   Index *pIdx,                    /* Index scan is using */
1038   int iCur,                       /* Cursor for IPK b-tree */
1039   int iIdxCur                     /* Index cursor */
1040 ){
1041   Parse *pParse = pWInfo->pParse; /* Parse context */
1042   Vdbe *v = pParse->pVdbe;        /* Vdbe to generate code within */
1043 
1044   assert( iIdxCur>0 );
1045   assert( pIdx->aiColumn[pIdx->nColumn-1]==-1 );
1046 
1047   sqlite3VdbeAddOp3(v, OP_DeferredSeek, iIdxCur, 0, iCur);
1048   if( (pWInfo->wctrlFlags & WHERE_OR_SUBCLAUSE)
1049    && DbMaskAllZero(sqlite3ParseToplevel(pParse)->writeMask)
1050   ){
1051     int i;
1052     Table *pTab = pIdx->pTable;
1053     int *ai = (int*)sqlite3DbMallocZero(pParse->db, sizeof(int)*(pTab->nCol+1));
1054     if( ai ){
1055       ai[0] = pTab->nCol;
1056       for(i=0; i<pIdx->nColumn-1; i++){
1057         int x1, x2;
1058         assert( pIdx->aiColumn[i]<pTab->nCol );
1059         x1 = pIdx->aiColumn[i];
1060         x2 = sqlite3TableColumnToStorage(pTab, x1);
1061         testcase( x1!=x2 );
1062         if( x1>=0 ) ai[x2+1] = i+1;
1063       }
1064       sqlite3VdbeChangeP4(v, -1, (char*)ai, P4_INTARRAY);
1065     }
1066   }
1067 }
1068 
1069 /*
1070 ** If the expression passed as the second argument is a vector, generate
1071 ** code to write the first nReg elements of the vector into an array
1072 ** of registers starting with iReg.
1073 **
1074 ** If the expression is not a vector, then nReg must be passed 1. In
1075 ** this case, generate code to evaluate the expression and leave the
1076 ** result in register iReg.
1077 */
1078 static void codeExprOrVector(Parse *pParse, Expr *p, int iReg, int nReg){
1079   assert( nReg>0 );
1080   if( p && sqlite3ExprIsVector(p) ){
1081 #ifndef SQLITE_OMIT_SUBQUERY
1082     if( (p->flags & EP_xIsSelect) ){
1083       Vdbe *v = pParse->pVdbe;
1084       int iSelect;
1085       assert( p->op==TK_SELECT );
1086       iSelect = sqlite3CodeSubselect(pParse, p);
1087       sqlite3VdbeAddOp3(v, OP_Copy, iSelect, iReg, nReg-1);
1088     }else
1089 #endif
1090     {
1091       int i;
1092       ExprList *pList = p->x.pList;
1093       assert( nReg<=pList->nExpr );
1094       for(i=0; i<nReg; i++){
1095         sqlite3ExprCode(pParse, pList->a[i].pExpr, iReg+i);
1096       }
1097     }
1098   }else{
1099     assert( nReg==1 );
1100     sqlite3ExprCode(pParse, p, iReg);
1101   }
1102 }
1103 
1104 /* An instance of the IdxExprTrans object carries information about a
1105 ** mapping from an expression on table columns into a column in an index
1106 ** down through the Walker.
1107 */
1108 typedef struct IdxExprTrans {
1109   Expr *pIdxExpr;    /* The index expression */
1110   int iTabCur;       /* The cursor of the corresponding table */
1111   int iIdxCur;       /* The cursor for the index */
1112   int iIdxCol;       /* The column for the index */
1113   int iTabCol;       /* The column for the table */
1114 } IdxExprTrans;
1115 
1116 /* The walker node callback used to transform matching expressions into
1117 ** a reference to an index column for an index on an expression.
1118 **
1119 ** If pExpr matches, then transform it into a reference to the index column
1120 ** that contains the value of pExpr.
1121 */
1122 static int whereIndexExprTransNode(Walker *p, Expr *pExpr){
1123   IdxExprTrans *pX = p->u.pIdxTrans;
1124   if( sqlite3ExprCompare(0, pExpr, pX->pIdxExpr, pX->iTabCur)==0 ){
1125     pExpr->affExpr = sqlite3ExprAffinity(pExpr);
1126     pExpr->op = TK_COLUMN;
1127     pExpr->iTable = pX->iIdxCur;
1128     pExpr->iColumn = pX->iIdxCol;
1129     pExpr->y.pTab = 0;
1130     return WRC_Prune;
1131   }else{
1132     return WRC_Continue;
1133   }
1134 }
1135 
1136 #ifndef SQLITE_OMIT_GENERATED_COLUMNS
1137 /* A walker node callback that translates a column reference to a table
1138 ** into a corresponding column reference of an index.
1139 */
1140 static int whereIndexExprTransColumn(Walker *p, Expr *pExpr){
1141   if( pExpr->op==TK_COLUMN ){
1142     IdxExprTrans *pX = p->u.pIdxTrans;
1143     if( pExpr->iTable==pX->iTabCur && pExpr->iColumn==pX->iTabCol ){
1144       pExpr->iTable = pX->iIdxCur;
1145       pExpr->iColumn = pX->iIdxCol;
1146       pExpr->y.pTab = 0;
1147     }
1148   }
1149   return WRC_Continue;
1150 }
1151 #endif /* SQLITE_OMIT_GENERATED_COLUMNS */
1152 
1153 /*
1154 ** For an indexes on expression X, locate every instance of expression X
1155 ** in pExpr and change that subexpression into a reference to the appropriate
1156 ** column of the index.
1157 **
1158 ** 2019-10-24: Updated to also translate references to a VIRTUAL column in
1159 ** the table into references to the corresponding (stored) column of the
1160 ** index.
1161 */
1162 static void whereIndexExprTrans(
1163   Index *pIdx,      /* The Index */
1164   int iTabCur,      /* Cursor of the table that is being indexed */
1165   int iIdxCur,      /* Cursor of the index itself */
1166   WhereInfo *pWInfo /* Transform expressions in this WHERE clause */
1167 ){
1168   int iIdxCol;               /* Column number of the index */
1169   ExprList *aColExpr;        /* Expressions that are indexed */
1170   Table *pTab;
1171   Walker w;
1172   IdxExprTrans x;
1173   aColExpr = pIdx->aColExpr;
1174   if( aColExpr==0 && !pIdx->bHasVCol ){
1175     /* The index does not reference any expressions or virtual columns
1176     ** so no translations are needed. */
1177     return;
1178   }
1179   pTab = pIdx->pTable;
1180   memset(&w, 0, sizeof(w));
1181   w.u.pIdxTrans = &x;
1182   x.iTabCur = iTabCur;
1183   x.iIdxCur = iIdxCur;
1184   for(iIdxCol=0; iIdxCol<pIdx->nColumn; iIdxCol++){
1185     i16 iRef = pIdx->aiColumn[iIdxCol];
1186     if( iRef==XN_EXPR ){
1187       assert( aColExpr->a[iIdxCol].pExpr!=0 );
1188       x.pIdxExpr = aColExpr->a[iIdxCol].pExpr;
1189       w.xExprCallback = whereIndexExprTransNode;
1190 #ifndef SQLITE_OMIT_GENERATED_COLUMNS
1191     }else if( iRef>=0 && (pTab->aCol[iRef].colFlags & COLFLAG_VIRTUAL)!=0 ){
1192       x.iTabCol = iRef;
1193       w.xExprCallback = whereIndexExprTransColumn;
1194 #endif /* SQLITE_OMIT_GENERATED_COLUMNS */
1195     }else{
1196       continue;
1197     }
1198     x.iIdxCol = iIdxCol;
1199     sqlite3WalkExpr(&w, pWInfo->pWhere);
1200     sqlite3WalkExprList(&w, pWInfo->pOrderBy);
1201     sqlite3WalkExprList(&w, pWInfo->pResultSet);
1202   }
1203 }
1204 
1205 /*
1206 ** The pTruth expression is always true because it is the WHERE clause
1207 ** a partial index that is driving a query loop.  Look through all of the
1208 ** WHERE clause terms on the query, and if any of those terms must be
1209 ** true because pTruth is true, then mark those WHERE clause terms as
1210 ** coded.
1211 */
1212 static void whereApplyPartialIndexConstraints(
1213   Expr *pTruth,
1214   int iTabCur,
1215   WhereClause *pWC
1216 ){
1217   int i;
1218   WhereTerm *pTerm;
1219   while( pTruth->op==TK_AND ){
1220     whereApplyPartialIndexConstraints(pTruth->pLeft, iTabCur, pWC);
1221     pTruth = pTruth->pRight;
1222   }
1223   for(i=0, pTerm=pWC->a; i<pWC->nTerm; i++, pTerm++){
1224     Expr *pExpr;
1225     if( pTerm->wtFlags & TERM_CODED ) continue;
1226     pExpr = pTerm->pExpr;
1227     if( sqlite3ExprCompare(0, pExpr, pTruth, iTabCur)==0 ){
1228       pTerm->wtFlags |= TERM_CODED;
1229     }
1230   }
1231 }
1232 
1233 /*
1234 ** Generate code for the start of the iLevel-th loop in the WHERE clause
1235 ** implementation described by pWInfo.
1236 */
1237 Bitmask sqlite3WhereCodeOneLoopStart(
1238   Parse *pParse,       /* Parsing context */
1239   Vdbe *v,             /* Prepared statement under construction */
1240   WhereInfo *pWInfo,   /* Complete information about the WHERE clause */
1241   int iLevel,          /* Which level of pWInfo->a[] should be coded */
1242   WhereLevel *pLevel,  /* The current level pointer */
1243   Bitmask notReady     /* Which tables are currently available */
1244 ){
1245   int j, k;            /* Loop counters */
1246   int iCur;            /* The VDBE cursor for the table */
1247   int addrNxt;         /* Where to jump to continue with the next IN case */
1248   int bRev;            /* True if we need to scan in reverse order */
1249   WhereLoop *pLoop;    /* The WhereLoop object being coded */
1250   WhereClause *pWC;    /* Decomposition of the entire WHERE clause */
1251   WhereTerm *pTerm;               /* A WHERE clause term */
1252   sqlite3 *db;                    /* Database connection */
1253   struct SrcList_item *pTabItem;  /* FROM clause term being coded */
1254   int addrBrk;                    /* Jump here to break out of the loop */
1255   int addrHalt;                   /* addrBrk for the outermost loop */
1256   int addrCont;                   /* Jump here to continue with next cycle */
1257   int iRowidReg = 0;        /* Rowid is stored in this register, if not zero */
1258   int iReleaseReg = 0;      /* Temp register to free before returning */
1259   Index *pIdx = 0;          /* Index used by loop (if any) */
1260   int iLoop;                /* Iteration of constraint generator loop */
1261 
1262   pWC = &pWInfo->sWC;
1263   db = pParse->db;
1264   pLoop = pLevel->pWLoop;
1265   pTabItem = &pWInfo->pTabList->a[pLevel->iFrom];
1266   iCur = pTabItem->iCursor;
1267   pLevel->notReady = notReady & ~sqlite3WhereGetMask(&pWInfo->sMaskSet, iCur);
1268   bRev = (pWInfo->revMask>>iLevel)&1;
1269   VdbeModuleComment((v, "Begin WHERE-loop%d: %s",iLevel,pTabItem->pTab->zName));
1270 
1271   /* Create labels for the "break" and "continue" instructions
1272   ** for the current loop.  Jump to addrBrk to break out of a loop.
1273   ** Jump to cont to go immediately to the next iteration of the
1274   ** loop.
1275   **
1276   ** When there is an IN operator, we also have a "addrNxt" label that
1277   ** means to continue with the next IN value combination.  When
1278   ** there are no IN operators in the constraints, the "addrNxt" label
1279   ** is the same as "addrBrk".
1280   */
1281   addrBrk = pLevel->addrBrk = pLevel->addrNxt = sqlite3VdbeMakeLabel(pParse);
1282   addrCont = pLevel->addrCont = sqlite3VdbeMakeLabel(pParse);
1283 
1284   /* If this is the right table of a LEFT OUTER JOIN, allocate and
1285   ** initialize a memory cell that records if this table matches any
1286   ** row of the left table of the join.
1287   */
1288   assert( (pWInfo->wctrlFlags & WHERE_OR_SUBCLAUSE)
1289        || pLevel->iFrom>0 || (pTabItem[0].fg.jointype & JT_LEFT)==0
1290   );
1291   if( pLevel->iFrom>0 && (pTabItem[0].fg.jointype & JT_LEFT)!=0 ){
1292     pLevel->iLeftJoin = ++pParse->nMem;
1293     sqlite3VdbeAddOp2(v, OP_Integer, 0, pLevel->iLeftJoin);
1294     VdbeComment((v, "init LEFT JOIN no-match flag"));
1295   }
1296 
1297   /* Compute a safe address to jump to if we discover that the table for
1298   ** this loop is empty and can never contribute content. */
1299   for(j=iLevel; j>0 && pWInfo->a[j].iLeftJoin==0; j--){}
1300   addrHalt = pWInfo->a[j].addrBrk;
1301 
1302   /* Special case of a FROM clause subquery implemented as a co-routine */
1303   if( pTabItem->fg.viaCoroutine ){
1304     int regYield = pTabItem->regReturn;
1305     sqlite3VdbeAddOp3(v, OP_InitCoroutine, regYield, 0, pTabItem->addrFillSub);
1306     pLevel->p2 =  sqlite3VdbeAddOp2(v, OP_Yield, regYield, addrBrk);
1307     VdbeCoverage(v);
1308     VdbeComment((v, "next row of %s", pTabItem->pTab->zName));
1309     pLevel->op = OP_Goto;
1310   }else
1311 
1312 #ifndef SQLITE_OMIT_VIRTUALTABLE
1313   if(  (pLoop->wsFlags & WHERE_VIRTUALTABLE)!=0 ){
1314     /* Case 1:  The table is a virtual-table.  Use the VFilter and VNext
1315     **          to access the data.
1316     */
1317     int iReg;   /* P3 Value for OP_VFilter */
1318     int addrNotFound;
1319     int nConstraint = pLoop->nLTerm;
1320     int iIn;    /* Counter for IN constraints */
1321 
1322     iReg = sqlite3GetTempRange(pParse, nConstraint+2);
1323     addrNotFound = pLevel->addrBrk;
1324     for(j=0; j<nConstraint; j++){
1325       int iTarget = iReg+j+2;
1326       pTerm = pLoop->aLTerm[j];
1327       if( NEVER(pTerm==0) ) continue;
1328       if( pTerm->eOperator & WO_IN ){
1329         codeEqualityTerm(pParse, pTerm, pLevel, j, bRev, iTarget);
1330         addrNotFound = pLevel->addrNxt;
1331       }else{
1332         Expr *pRight = pTerm->pExpr->pRight;
1333         codeExprOrVector(pParse, pRight, iTarget, 1);
1334       }
1335     }
1336     sqlite3VdbeAddOp2(v, OP_Integer, pLoop->u.vtab.idxNum, iReg);
1337     sqlite3VdbeAddOp2(v, OP_Integer, nConstraint, iReg+1);
1338     sqlite3VdbeAddOp4(v, OP_VFilter, iCur, addrNotFound, iReg,
1339                       pLoop->u.vtab.idxStr,
1340                       pLoop->u.vtab.needFree ? P4_DYNAMIC : P4_STATIC);
1341     VdbeCoverage(v);
1342     pLoop->u.vtab.needFree = 0;
1343     pLevel->p1 = iCur;
1344     pLevel->op = pWInfo->eOnePass ? OP_Noop : OP_VNext;
1345     pLevel->p2 = sqlite3VdbeCurrentAddr(v);
1346     iIn = pLevel->u.in.nIn;
1347     for(j=nConstraint-1; j>=0; j--){
1348       pTerm = pLoop->aLTerm[j];
1349       if( (pTerm->eOperator & WO_IN)!=0 ) iIn--;
1350       if( j<16 && (pLoop->u.vtab.omitMask>>j)&1 ){
1351         disableTerm(pLevel, pTerm);
1352       }else if( (pTerm->eOperator & WO_IN)!=0
1353         && sqlite3ExprVectorSize(pTerm->pExpr->pLeft)==1
1354       ){
1355         Expr *pCompare;  /* The comparison operator */
1356         Expr *pRight;    /* RHS of the comparison */
1357         VdbeOp *pOp;     /* Opcode to access the value of the IN constraint */
1358 
1359         /* Reload the constraint value into reg[iReg+j+2].  The same value
1360         ** was loaded into the same register prior to the OP_VFilter, but
1361         ** the xFilter implementation might have changed the datatype or
1362         ** encoding of the value in the register, so it *must* be reloaded. */
1363         assert( pLevel->u.in.aInLoop!=0 || db->mallocFailed );
1364         if( !db->mallocFailed ){
1365           assert( iIn>=0 && iIn<pLevel->u.in.nIn );
1366           pOp = sqlite3VdbeGetOp(v, pLevel->u.in.aInLoop[iIn].addrInTop);
1367           assert( pOp->opcode==OP_Column || pOp->opcode==OP_Rowid );
1368           assert( pOp->opcode!=OP_Column || pOp->p3==iReg+j+2 );
1369           assert( pOp->opcode!=OP_Rowid || pOp->p2==iReg+j+2 );
1370           testcase( pOp->opcode==OP_Rowid );
1371           sqlite3VdbeAddOp3(v, pOp->opcode, pOp->p1, pOp->p2, pOp->p3);
1372         }
1373 
1374         /* Generate code that will continue to the next row if
1375         ** the IN constraint is not satisfied */
1376         pCompare = sqlite3PExpr(pParse, TK_EQ, 0, 0);
1377         assert( pCompare!=0 || db->mallocFailed );
1378         if( pCompare ){
1379           pCompare->pLeft = pTerm->pExpr->pLeft;
1380           pCompare->pRight = pRight = sqlite3Expr(db, TK_REGISTER, 0);
1381           if( pRight ){
1382             pRight->iTable = iReg+j+2;
1383             sqlite3ExprIfFalse(pParse, pCompare, pLevel->addrCont, 0);
1384           }
1385           pCompare->pLeft = 0;
1386           sqlite3ExprDelete(db, pCompare);
1387         }
1388       }
1389     }
1390     assert( iIn==0 || db->mallocFailed );
1391     /* These registers need to be preserved in case there is an IN operator
1392     ** loop.  So we could deallocate the registers here (and potentially
1393     ** reuse them later) if (pLoop->wsFlags & WHERE_IN_ABLE)==0.  But it seems
1394     ** simpler and safer to simply not reuse the registers.
1395     **
1396     **    sqlite3ReleaseTempRange(pParse, iReg, nConstraint+2);
1397     */
1398   }else
1399 #endif /* SQLITE_OMIT_VIRTUALTABLE */
1400 
1401   if( (pLoop->wsFlags & WHERE_IPK)!=0
1402    && (pLoop->wsFlags & (WHERE_COLUMN_IN|WHERE_COLUMN_EQ))!=0
1403   ){
1404     /* Case 2:  We can directly reference a single row using an
1405     **          equality comparison against the ROWID field.  Or
1406     **          we reference multiple rows using a "rowid IN (...)"
1407     **          construct.
1408     */
1409     assert( pLoop->u.btree.nEq==1 );
1410     pTerm = pLoop->aLTerm[0];
1411     assert( pTerm!=0 );
1412     assert( pTerm->pExpr!=0 );
1413     testcase( pTerm->wtFlags & TERM_VIRTUAL );
1414     iReleaseReg = ++pParse->nMem;
1415     iRowidReg = codeEqualityTerm(pParse, pTerm, pLevel, 0, bRev, iReleaseReg);
1416     if( iRowidReg!=iReleaseReg ) sqlite3ReleaseTempReg(pParse, iReleaseReg);
1417     addrNxt = pLevel->addrNxt;
1418     sqlite3VdbeAddOp3(v, OP_SeekRowid, iCur, addrNxt, iRowidReg);
1419     VdbeCoverage(v);
1420     pLevel->op = OP_Noop;
1421     if( (pTerm->prereqAll & pLevel->notReady)==0 ){
1422       pTerm->wtFlags |= TERM_CODED;
1423     }
1424   }else if( (pLoop->wsFlags & WHERE_IPK)!=0
1425          && (pLoop->wsFlags & WHERE_COLUMN_RANGE)!=0
1426   ){
1427     /* Case 3:  We have an inequality comparison against the ROWID field.
1428     */
1429     int testOp = OP_Noop;
1430     int start;
1431     int memEndValue = 0;
1432     WhereTerm *pStart, *pEnd;
1433 
1434     j = 0;
1435     pStart = pEnd = 0;
1436     if( pLoop->wsFlags & WHERE_BTM_LIMIT ) pStart = pLoop->aLTerm[j++];
1437     if( pLoop->wsFlags & WHERE_TOP_LIMIT ) pEnd = pLoop->aLTerm[j++];
1438     assert( pStart!=0 || pEnd!=0 );
1439     if( bRev ){
1440       pTerm = pStart;
1441       pStart = pEnd;
1442       pEnd = pTerm;
1443     }
1444     codeCursorHint(pTabItem, pWInfo, pLevel, pEnd);
1445     if( pStart ){
1446       Expr *pX;             /* The expression that defines the start bound */
1447       int r1, rTemp;        /* Registers for holding the start boundary */
1448       int op;               /* Cursor seek operation */
1449 
1450       /* The following constant maps TK_xx codes into corresponding
1451       ** seek opcodes.  It depends on a particular ordering of TK_xx
1452       */
1453       const u8 aMoveOp[] = {
1454            /* TK_GT */  OP_SeekGT,
1455            /* TK_LE */  OP_SeekLE,
1456            /* TK_LT */  OP_SeekLT,
1457            /* TK_GE */  OP_SeekGE
1458       };
1459       assert( TK_LE==TK_GT+1 );      /* Make sure the ordering.. */
1460       assert( TK_LT==TK_GT+2 );      /*  ... of the TK_xx values... */
1461       assert( TK_GE==TK_GT+3 );      /*  ... is correcct. */
1462 
1463       assert( (pStart->wtFlags & TERM_VNULL)==0 );
1464       testcase( pStart->wtFlags & TERM_VIRTUAL );
1465       pX = pStart->pExpr;
1466       assert( pX!=0 );
1467       testcase( pStart->leftCursor!=iCur ); /* transitive constraints */
1468       if( sqlite3ExprIsVector(pX->pRight) ){
1469         r1 = rTemp = sqlite3GetTempReg(pParse);
1470         codeExprOrVector(pParse, pX->pRight, r1, 1);
1471         testcase( pX->op==TK_GT );
1472         testcase( pX->op==TK_GE );
1473         testcase( pX->op==TK_LT );
1474         testcase( pX->op==TK_LE );
1475         op = aMoveOp[((pX->op - TK_GT - 1) & 0x3) | 0x1];
1476         assert( pX->op!=TK_GT || op==OP_SeekGE );
1477         assert( pX->op!=TK_GE || op==OP_SeekGE );
1478         assert( pX->op!=TK_LT || op==OP_SeekLE );
1479         assert( pX->op!=TK_LE || op==OP_SeekLE );
1480       }else{
1481         r1 = sqlite3ExprCodeTemp(pParse, pX->pRight, &rTemp);
1482         disableTerm(pLevel, pStart);
1483         op = aMoveOp[(pX->op - TK_GT)];
1484       }
1485       sqlite3VdbeAddOp3(v, op, iCur, addrBrk, r1);
1486       VdbeComment((v, "pk"));
1487       VdbeCoverageIf(v, pX->op==TK_GT);
1488       VdbeCoverageIf(v, pX->op==TK_LE);
1489       VdbeCoverageIf(v, pX->op==TK_LT);
1490       VdbeCoverageIf(v, pX->op==TK_GE);
1491       sqlite3ReleaseTempReg(pParse, rTemp);
1492     }else{
1493       sqlite3VdbeAddOp2(v, bRev ? OP_Last : OP_Rewind, iCur, addrHalt);
1494       VdbeCoverageIf(v, bRev==0);
1495       VdbeCoverageIf(v, bRev!=0);
1496     }
1497     if( pEnd ){
1498       Expr *pX;
1499       pX = pEnd->pExpr;
1500       assert( pX!=0 );
1501       assert( (pEnd->wtFlags & TERM_VNULL)==0 );
1502       testcase( pEnd->leftCursor!=iCur ); /* Transitive constraints */
1503       testcase( pEnd->wtFlags & TERM_VIRTUAL );
1504       memEndValue = ++pParse->nMem;
1505       codeExprOrVector(pParse, pX->pRight, memEndValue, 1);
1506       if( 0==sqlite3ExprIsVector(pX->pRight)
1507        && (pX->op==TK_LT || pX->op==TK_GT)
1508       ){
1509         testOp = bRev ? OP_Le : OP_Ge;
1510       }else{
1511         testOp = bRev ? OP_Lt : OP_Gt;
1512       }
1513       if( 0==sqlite3ExprIsVector(pX->pRight) ){
1514         disableTerm(pLevel, pEnd);
1515       }
1516     }
1517     start = sqlite3VdbeCurrentAddr(v);
1518     pLevel->op = bRev ? OP_Prev : OP_Next;
1519     pLevel->p1 = iCur;
1520     pLevel->p2 = start;
1521     assert( pLevel->p5==0 );
1522     if( testOp!=OP_Noop ){
1523       iRowidReg = ++pParse->nMem;
1524       sqlite3VdbeAddOp2(v, OP_Rowid, iCur, iRowidReg);
1525       sqlite3VdbeAddOp3(v, testOp, memEndValue, addrBrk, iRowidReg);
1526       VdbeCoverageIf(v, testOp==OP_Le);
1527       VdbeCoverageIf(v, testOp==OP_Lt);
1528       VdbeCoverageIf(v, testOp==OP_Ge);
1529       VdbeCoverageIf(v, testOp==OP_Gt);
1530       sqlite3VdbeChangeP5(v, SQLITE_AFF_NUMERIC | SQLITE_JUMPIFNULL);
1531     }
1532   }else if( pLoop->wsFlags & WHERE_INDEXED ){
1533     /* Case 4: A scan using an index.
1534     **
1535     **         The WHERE clause may contain zero or more equality
1536     **         terms ("==" or "IN" operators) that refer to the N
1537     **         left-most columns of the index. It may also contain
1538     **         inequality constraints (>, <, >= or <=) on the indexed
1539     **         column that immediately follows the N equalities. Only
1540     **         the right-most column can be an inequality - the rest must
1541     **         use the "==" and "IN" operators. For example, if the
1542     **         index is on (x,y,z), then the following clauses are all
1543     **         optimized:
1544     **
1545     **            x=5
1546     **            x=5 AND y=10
1547     **            x=5 AND y<10
1548     **            x=5 AND y>5 AND y<10
1549     **            x=5 AND y=5 AND z<=10
1550     **
1551     **         The z<10 term of the following cannot be used, only
1552     **         the x=5 term:
1553     **
1554     **            x=5 AND z<10
1555     **
1556     **         N may be zero if there are inequality constraints.
1557     **         If there are no inequality constraints, then N is at
1558     **         least one.
1559     **
1560     **         This case is also used when there are no WHERE clause
1561     **         constraints but an index is selected anyway, in order
1562     **         to force the output order to conform to an ORDER BY.
1563     */
1564     static const u8 aStartOp[] = {
1565       0,
1566       0,
1567       OP_Rewind,           /* 2: (!start_constraints && startEq &&  !bRev) */
1568       OP_Last,             /* 3: (!start_constraints && startEq &&   bRev) */
1569       OP_SeekGT,           /* 4: (start_constraints  && !startEq && !bRev) */
1570       OP_SeekLT,           /* 5: (start_constraints  && !startEq &&  bRev) */
1571       OP_SeekGE,           /* 6: (start_constraints  &&  startEq && !bRev) */
1572       OP_SeekLE            /* 7: (start_constraints  &&  startEq &&  bRev) */
1573     };
1574     static const u8 aEndOp[] = {
1575       OP_IdxGE,            /* 0: (end_constraints && !bRev && !endEq) */
1576       OP_IdxGT,            /* 1: (end_constraints && !bRev &&  endEq) */
1577       OP_IdxLE,            /* 2: (end_constraints &&  bRev && !endEq) */
1578       OP_IdxLT,            /* 3: (end_constraints &&  bRev &&  endEq) */
1579     };
1580     u16 nEq = pLoop->u.btree.nEq;     /* Number of == or IN terms */
1581     u16 nBtm = pLoop->u.btree.nBtm;   /* Length of BTM vector */
1582     u16 nTop = pLoop->u.btree.nTop;   /* Length of TOP vector */
1583     int regBase;                 /* Base register holding constraint values */
1584     WhereTerm *pRangeStart = 0;  /* Inequality constraint at range start */
1585     WhereTerm *pRangeEnd = 0;    /* Inequality constraint at range end */
1586     int startEq;                 /* True if range start uses ==, >= or <= */
1587     int endEq;                   /* True if range end uses ==, >= or <= */
1588     int start_constraints;       /* Start of range is constrained */
1589     int nConstraint;             /* Number of constraint terms */
1590     int iIdxCur;                 /* The VDBE cursor for the index */
1591     int nExtraReg = 0;           /* Number of extra registers needed */
1592     int op;                      /* Instruction opcode */
1593     char *zStartAff;             /* Affinity for start of range constraint */
1594     char *zEndAff = 0;           /* Affinity for end of range constraint */
1595     u8 bSeekPastNull = 0;        /* True to seek past initial nulls */
1596     u8 bStopAtNull = 0;          /* Add condition to terminate at NULLs */
1597     int omitTable;               /* True if we use the index only */
1598     int regBignull = 0;          /* big-null flag register */
1599 
1600     pIdx = pLoop->u.btree.pIndex;
1601     iIdxCur = pLevel->iIdxCur;
1602     assert( nEq>=pLoop->nSkip );
1603 
1604     /* Find any inequality constraint terms for the start and end
1605     ** of the range.
1606     */
1607     j = nEq;
1608     if( pLoop->wsFlags & WHERE_BTM_LIMIT ){
1609       pRangeStart = pLoop->aLTerm[j++];
1610       nExtraReg = MAX(nExtraReg, pLoop->u.btree.nBtm);
1611       /* Like optimization range constraints always occur in pairs */
1612       assert( (pRangeStart->wtFlags & TERM_LIKEOPT)==0 ||
1613               (pLoop->wsFlags & WHERE_TOP_LIMIT)!=0 );
1614     }
1615     if( pLoop->wsFlags & WHERE_TOP_LIMIT ){
1616       pRangeEnd = pLoop->aLTerm[j++];
1617       nExtraReg = MAX(nExtraReg, pLoop->u.btree.nTop);
1618 #ifndef SQLITE_LIKE_DOESNT_MATCH_BLOBS
1619       if( (pRangeEnd->wtFlags & TERM_LIKEOPT)!=0 ){
1620         assert( pRangeStart!=0 );                     /* LIKE opt constraints */
1621         assert( pRangeStart->wtFlags & TERM_LIKEOPT );   /* occur in pairs */
1622         pLevel->iLikeRepCntr = (u32)++pParse->nMem;
1623         sqlite3VdbeAddOp2(v, OP_Integer, 1, (int)pLevel->iLikeRepCntr);
1624         VdbeComment((v, "LIKE loop counter"));
1625         pLevel->addrLikeRep = sqlite3VdbeCurrentAddr(v);
1626         /* iLikeRepCntr actually stores 2x the counter register number.  The
1627         ** bottom bit indicates whether the search order is ASC or DESC. */
1628         testcase( bRev );
1629         testcase( pIdx->aSortOrder[nEq]==SQLITE_SO_DESC );
1630         assert( (bRev & ~1)==0 );
1631         pLevel->iLikeRepCntr <<=1;
1632         pLevel->iLikeRepCntr |= bRev ^ (pIdx->aSortOrder[nEq]==SQLITE_SO_DESC);
1633       }
1634 #endif
1635       if( pRangeStart==0 ){
1636         j = pIdx->aiColumn[nEq];
1637         if( (j>=0 && pIdx->pTable->aCol[j].notNull==0) || j==XN_EXPR ){
1638           bSeekPastNull = 1;
1639         }
1640       }
1641     }
1642     assert( pRangeEnd==0 || (pRangeEnd->wtFlags & TERM_VNULL)==0 );
1643 
1644     /* If the WHERE_BIGNULL_SORT flag is set, then index column nEq uses
1645     ** a non-default "big-null" sort (either ASC NULLS LAST or DESC NULLS
1646     ** FIRST). In both cases separate ordered scans are made of those
1647     ** index entries for which the column is null and for those for which
1648     ** it is not. For an ASC sort, the non-NULL entries are scanned first.
1649     ** For DESC, NULL entries are scanned first.
1650     */
1651     if( (pLoop->wsFlags & (WHERE_TOP_LIMIT|WHERE_BTM_LIMIT))==0
1652      && (pLoop->wsFlags & WHERE_BIGNULL_SORT)!=0
1653     ){
1654       assert( bSeekPastNull==0 && nExtraReg==0 && nBtm==0 && nTop==0 );
1655       assert( pRangeEnd==0 && pRangeStart==0 );
1656       assert( pLoop->nSkip==0 );
1657       nExtraReg = 1;
1658       bSeekPastNull = 1;
1659       pLevel->regBignull = regBignull = ++pParse->nMem;
1660       pLevel->addrBignull = sqlite3VdbeMakeLabel(pParse);
1661     }
1662 
1663     /* If we are doing a reverse order scan on an ascending index, or
1664     ** a forward order scan on a descending index, interchange the
1665     ** start and end terms (pRangeStart and pRangeEnd).
1666     */
1667     if( (nEq<pIdx->nKeyCol && bRev==(pIdx->aSortOrder[nEq]==SQLITE_SO_ASC))
1668      || (bRev && pIdx->nKeyCol==nEq)
1669     ){
1670       SWAP(WhereTerm *, pRangeEnd, pRangeStart);
1671       SWAP(u8, bSeekPastNull, bStopAtNull);
1672       SWAP(u8, nBtm, nTop);
1673     }
1674 
1675     /* Generate code to evaluate all constraint terms using == or IN
1676     ** and store the values of those terms in an array of registers
1677     ** starting at regBase.
1678     */
1679     codeCursorHint(pTabItem, pWInfo, pLevel, pRangeEnd);
1680     regBase = codeAllEqualityTerms(pParse,pLevel,bRev,nExtraReg,&zStartAff);
1681     assert( zStartAff==0 || sqlite3Strlen30(zStartAff)>=nEq );
1682     if( zStartAff && nTop ){
1683       zEndAff = sqlite3DbStrDup(db, &zStartAff[nEq]);
1684     }
1685     addrNxt = (regBignull ? pLevel->addrBignull : pLevel->addrNxt);
1686 
1687     testcase( pRangeStart && (pRangeStart->eOperator & WO_LE)!=0 );
1688     testcase( pRangeStart && (pRangeStart->eOperator & WO_GE)!=0 );
1689     testcase( pRangeEnd && (pRangeEnd->eOperator & WO_LE)!=0 );
1690     testcase( pRangeEnd && (pRangeEnd->eOperator & WO_GE)!=0 );
1691     startEq = !pRangeStart || pRangeStart->eOperator & (WO_LE|WO_GE);
1692     endEq =   !pRangeEnd || pRangeEnd->eOperator & (WO_LE|WO_GE);
1693     start_constraints = pRangeStart || nEq>0;
1694 
1695     /* Seek the index cursor to the start of the range. */
1696     nConstraint = nEq;
1697     if( pRangeStart ){
1698       Expr *pRight = pRangeStart->pExpr->pRight;
1699       codeExprOrVector(pParse, pRight, regBase+nEq, nBtm);
1700       whereLikeOptimizationStringFixup(v, pLevel, pRangeStart);
1701       if( (pRangeStart->wtFlags & TERM_VNULL)==0
1702        && sqlite3ExprCanBeNull(pRight)
1703       ){
1704         sqlite3VdbeAddOp2(v, OP_IsNull, regBase+nEq, addrNxt);
1705         VdbeCoverage(v);
1706       }
1707       if( zStartAff ){
1708         updateRangeAffinityStr(pRight, nBtm, &zStartAff[nEq]);
1709       }
1710       nConstraint += nBtm;
1711       testcase( pRangeStart->wtFlags & TERM_VIRTUAL );
1712       if( sqlite3ExprIsVector(pRight)==0 ){
1713         disableTerm(pLevel, pRangeStart);
1714       }else{
1715         startEq = 1;
1716       }
1717       bSeekPastNull = 0;
1718     }else if( bSeekPastNull ){
1719       startEq = 0;
1720       sqlite3VdbeAddOp2(v, OP_Null, 0, regBase+nEq);
1721       start_constraints = 1;
1722       nConstraint++;
1723     }else if( regBignull ){
1724       sqlite3VdbeAddOp2(v, OP_Null, 0, regBase+nEq);
1725       start_constraints = 1;
1726       nConstraint++;
1727     }
1728     codeApplyAffinity(pParse, regBase, nConstraint - bSeekPastNull, zStartAff);
1729     if( pLoop->nSkip>0 && nConstraint==pLoop->nSkip ){
1730       /* The skip-scan logic inside the call to codeAllEqualityConstraints()
1731       ** above has already left the cursor sitting on the correct row,
1732       ** so no further seeking is needed */
1733     }else{
1734       if( pLoop->wsFlags & WHERE_IN_EARLYOUT ){
1735         sqlite3VdbeAddOp1(v, OP_SeekHit, iIdxCur);
1736       }
1737       if( regBignull ){
1738         sqlite3VdbeAddOp2(v, OP_Integer, 1, regBignull);
1739         VdbeComment((v, "NULL-scan pass ctr"));
1740       }
1741 
1742       op = aStartOp[(start_constraints<<2) + (startEq<<1) + bRev];
1743       assert( op!=0 );
1744       sqlite3VdbeAddOp4Int(v, op, iIdxCur, addrNxt, regBase, nConstraint);
1745       VdbeCoverage(v);
1746       VdbeCoverageIf(v, op==OP_Rewind);  testcase( op==OP_Rewind );
1747       VdbeCoverageIf(v, op==OP_Last);    testcase( op==OP_Last );
1748       VdbeCoverageIf(v, op==OP_SeekGT);  testcase( op==OP_SeekGT );
1749       VdbeCoverageIf(v, op==OP_SeekGE);  testcase( op==OP_SeekGE );
1750       VdbeCoverageIf(v, op==OP_SeekLE);  testcase( op==OP_SeekLE );
1751       VdbeCoverageIf(v, op==OP_SeekLT);  testcase( op==OP_SeekLT );
1752 
1753       assert( bSeekPastNull==0 || bStopAtNull==0 );
1754       if( regBignull ){
1755         assert( bSeekPastNull==1 || bStopAtNull==1 );
1756         assert( bSeekPastNull==!bStopAtNull );
1757         assert( bStopAtNull==startEq );
1758         sqlite3VdbeAddOp2(v, OP_Goto, 0, sqlite3VdbeCurrentAddr(v)+2);
1759         op = aStartOp[(nConstraint>1)*4 + 2 + bRev];
1760         sqlite3VdbeAddOp4Int(v, op, iIdxCur, addrNxt, regBase,
1761                              nConstraint-startEq);
1762         VdbeCoverage(v);
1763         VdbeCoverageIf(v, op==OP_Rewind);  testcase( op==OP_Rewind );
1764         VdbeCoverageIf(v, op==OP_Last);    testcase( op==OP_Last );
1765         VdbeCoverageIf(v, op==OP_SeekGE);  testcase( op==OP_SeekGE );
1766         VdbeCoverageIf(v, op==OP_SeekLE);  testcase( op==OP_SeekLE );
1767         assert( op==OP_Rewind || op==OP_Last || op==OP_SeekGE || op==OP_SeekLE);
1768       }
1769     }
1770 
1771     /* Load the value for the inequality constraint at the end of the
1772     ** range (if any).
1773     */
1774     nConstraint = nEq;
1775     if( pRangeEnd ){
1776       Expr *pRight = pRangeEnd->pExpr->pRight;
1777       codeExprOrVector(pParse, pRight, regBase+nEq, nTop);
1778       whereLikeOptimizationStringFixup(v, pLevel, pRangeEnd);
1779       if( (pRangeEnd->wtFlags & TERM_VNULL)==0
1780        && sqlite3ExprCanBeNull(pRight)
1781       ){
1782         sqlite3VdbeAddOp2(v, OP_IsNull, regBase+nEq, addrNxt);
1783         VdbeCoverage(v);
1784       }
1785       if( zEndAff ){
1786         updateRangeAffinityStr(pRight, nTop, zEndAff);
1787         codeApplyAffinity(pParse, regBase+nEq, nTop, zEndAff);
1788       }else{
1789         assert( pParse->db->mallocFailed );
1790       }
1791       nConstraint += nTop;
1792       testcase( pRangeEnd->wtFlags & TERM_VIRTUAL );
1793 
1794       if( sqlite3ExprIsVector(pRight)==0 ){
1795         disableTerm(pLevel, pRangeEnd);
1796       }else{
1797         endEq = 1;
1798       }
1799     }else if( bStopAtNull ){
1800       if( regBignull==0 ){
1801         sqlite3VdbeAddOp2(v, OP_Null, 0, regBase+nEq);
1802         endEq = 0;
1803       }
1804       nConstraint++;
1805     }
1806     sqlite3DbFree(db, zStartAff);
1807     sqlite3DbFree(db, zEndAff);
1808 
1809     /* Top of the loop body */
1810     pLevel->p2 = sqlite3VdbeCurrentAddr(v);
1811 
1812     /* Check if the index cursor is past the end of the range. */
1813     if( nConstraint ){
1814       if( regBignull ){
1815         /* Except, skip the end-of-range check while doing the NULL-scan */
1816         sqlite3VdbeAddOp2(v, OP_IfNot, regBignull, sqlite3VdbeCurrentAddr(v)+3);
1817         VdbeComment((v, "If NULL-scan 2nd pass"));
1818         VdbeCoverage(v);
1819       }
1820       op = aEndOp[bRev*2 + endEq];
1821       sqlite3VdbeAddOp4Int(v, op, iIdxCur, addrNxt, regBase, nConstraint);
1822       testcase( op==OP_IdxGT );  VdbeCoverageIf(v, op==OP_IdxGT );
1823       testcase( op==OP_IdxGE );  VdbeCoverageIf(v, op==OP_IdxGE );
1824       testcase( op==OP_IdxLT );  VdbeCoverageIf(v, op==OP_IdxLT );
1825       testcase( op==OP_IdxLE );  VdbeCoverageIf(v, op==OP_IdxLE );
1826     }
1827     if( regBignull ){
1828       /* During a NULL-scan, check to see if we have reached the end of
1829       ** the NULLs */
1830       assert( bSeekPastNull==!bStopAtNull );
1831       assert( bSeekPastNull+bStopAtNull==1 );
1832       assert( nConstraint+bSeekPastNull>0 );
1833       sqlite3VdbeAddOp2(v, OP_If, regBignull, sqlite3VdbeCurrentAddr(v)+2);
1834       VdbeComment((v, "If NULL-scan 1st pass"));
1835       VdbeCoverage(v);
1836       op = aEndOp[bRev*2 + bSeekPastNull];
1837       sqlite3VdbeAddOp4Int(v, op, iIdxCur, addrNxt, regBase,
1838                            nConstraint+bSeekPastNull);
1839       testcase( op==OP_IdxGT );  VdbeCoverageIf(v, op==OP_IdxGT );
1840       testcase( op==OP_IdxGE );  VdbeCoverageIf(v, op==OP_IdxGE );
1841       testcase( op==OP_IdxLT );  VdbeCoverageIf(v, op==OP_IdxLT );
1842       testcase( op==OP_IdxLE );  VdbeCoverageIf(v, op==OP_IdxLE );
1843     }
1844 
1845     if( pLoop->wsFlags & WHERE_IN_EARLYOUT ){
1846       sqlite3VdbeAddOp2(v, OP_SeekHit, iIdxCur, 1);
1847     }
1848 
1849     /* Seek the table cursor, if required */
1850     omitTable = (pLoop->wsFlags & WHERE_IDX_ONLY)!=0
1851            && (pWInfo->wctrlFlags & WHERE_OR_SUBCLAUSE)==0;
1852     if( omitTable ){
1853       /* pIdx is a covering index.  No need to access the main table. */
1854     }else if( HasRowid(pIdx->pTable) ){
1855       if( (pWInfo->wctrlFlags & WHERE_SEEK_TABLE) || (
1856           (pWInfo->wctrlFlags & WHERE_SEEK_UNIQ_TABLE)
1857        && (pWInfo->eOnePass==ONEPASS_SINGLE)
1858       )){
1859         iRowidReg = ++pParse->nMem;
1860         sqlite3VdbeAddOp2(v, OP_IdxRowid, iIdxCur, iRowidReg);
1861         sqlite3VdbeAddOp3(v, OP_NotExists, iCur, 0, iRowidReg);
1862         VdbeCoverage(v);
1863       }else{
1864         codeDeferredSeek(pWInfo, pIdx, iCur, iIdxCur);
1865       }
1866     }else if( iCur!=iIdxCur ){
1867       Index *pPk = sqlite3PrimaryKeyIndex(pIdx->pTable);
1868       iRowidReg = sqlite3GetTempRange(pParse, pPk->nKeyCol);
1869       for(j=0; j<pPk->nKeyCol; j++){
1870         k = sqlite3TableColumnToIndex(pIdx, pPk->aiColumn[j]);
1871         sqlite3VdbeAddOp3(v, OP_Column, iIdxCur, k, iRowidReg+j);
1872       }
1873       sqlite3VdbeAddOp4Int(v, OP_NotFound, iCur, addrCont,
1874                            iRowidReg, pPk->nKeyCol); VdbeCoverage(v);
1875     }
1876 
1877     if( pLevel->iLeftJoin==0 ){
1878       /* If pIdx is an index on one or more expressions, then look through
1879       ** all the expressions in pWInfo and try to transform matching expressions
1880       ** into reference to index columns.  Also attempt to translate references
1881       ** to virtual columns in the table into references to (stored) columns
1882       ** of the index.
1883       **
1884       ** Do not do this for the RHS of a LEFT JOIN. This is because the
1885       ** expression may be evaluated after OP_NullRow has been executed on
1886       ** the cursor. In this case it is important to do the full evaluation,
1887       ** as the result of the expression may not be NULL, even if all table
1888       ** column values are.  https://www.sqlite.org/src/info/7fa8049685b50b5a
1889       **
1890       ** Also, do not do this when processing one index an a multi-index
1891       ** OR clause, since the transformation will become invalid once we
1892       ** move forward to the next index.
1893       ** https://sqlite.org/src/info/4e8e4857d32d401f
1894       */
1895       if( (pWInfo->wctrlFlags & WHERE_OR_SUBCLAUSE)==0 ){
1896         whereIndexExprTrans(pIdx, iCur, iIdxCur, pWInfo);
1897       }
1898 
1899       /* If a partial index is driving the loop, try to eliminate WHERE clause
1900       ** terms from the query that must be true due to the WHERE clause of
1901       ** the partial index.
1902       **
1903       ** 2019-11-02 ticket 623eff57e76d45f6: This optimization does not work
1904       ** for a LEFT JOIN.
1905       */
1906       if( pIdx->pPartIdxWhere ){
1907         whereApplyPartialIndexConstraints(pIdx->pPartIdxWhere, iCur, pWC);
1908       }
1909     }else{
1910       testcase( pIdx->pPartIdxWhere );
1911       /* The following assert() is not a requirement, merely an observation:
1912       ** The OR-optimization doesn't work for the right hand table of
1913       ** a LEFT JOIN: */
1914       assert( (pWInfo->wctrlFlags & WHERE_OR_SUBCLAUSE)==0 );
1915     }
1916 
1917     /* Record the instruction used to terminate the loop. */
1918     if( pLoop->wsFlags & WHERE_ONEROW ){
1919       pLevel->op = OP_Noop;
1920     }else if( bRev ){
1921       pLevel->op = OP_Prev;
1922     }else{
1923       pLevel->op = OP_Next;
1924     }
1925     pLevel->p1 = iIdxCur;
1926     pLevel->p3 = (pLoop->wsFlags&WHERE_UNQ_WANTED)!=0 ? 1:0;
1927     if( (pLoop->wsFlags & WHERE_CONSTRAINT)==0 ){
1928       pLevel->p5 = SQLITE_STMTSTATUS_FULLSCAN_STEP;
1929     }else{
1930       assert( pLevel->p5==0 );
1931     }
1932     if( omitTable ) pIdx = 0;
1933   }else
1934 
1935 #ifndef SQLITE_OMIT_OR_OPTIMIZATION
1936   if( pLoop->wsFlags & WHERE_MULTI_OR ){
1937     /* Case 5:  Two or more separately indexed terms connected by OR
1938     **
1939     ** Example:
1940     **
1941     **   CREATE TABLE t1(a,b,c,d);
1942     **   CREATE INDEX i1 ON t1(a);
1943     **   CREATE INDEX i2 ON t1(b);
1944     **   CREATE INDEX i3 ON t1(c);
1945     **
1946     **   SELECT * FROM t1 WHERE a=5 OR b=7 OR (c=11 AND d=13)
1947     **
1948     ** In the example, there are three indexed terms connected by OR.
1949     ** The top of the loop looks like this:
1950     **
1951     **          Null       1                # Zero the rowset in reg 1
1952     **
1953     ** Then, for each indexed term, the following. The arguments to
1954     ** RowSetTest are such that the rowid of the current row is inserted
1955     ** into the RowSet. If it is already present, control skips the
1956     ** Gosub opcode and jumps straight to the code generated by WhereEnd().
1957     **
1958     **        sqlite3WhereBegin(<term>)
1959     **          RowSetTest                  # Insert rowid into rowset
1960     **          Gosub      2 A
1961     **        sqlite3WhereEnd()
1962     **
1963     ** Following the above, code to terminate the loop. Label A, the target
1964     ** of the Gosub above, jumps to the instruction right after the Goto.
1965     **
1966     **          Null       1                # Zero the rowset in reg 1
1967     **          Goto       B                # The loop is finished.
1968     **
1969     **       A: <loop body>                 # Return data, whatever.
1970     **
1971     **          Return     2                # Jump back to the Gosub
1972     **
1973     **       B: <after the loop>
1974     **
1975     ** Added 2014-05-26: If the table is a WITHOUT ROWID table, then
1976     ** use an ephemeral index instead of a RowSet to record the primary
1977     ** keys of the rows we have already seen.
1978     **
1979     */
1980     WhereClause *pOrWc;    /* The OR-clause broken out into subterms */
1981     SrcList *pOrTab;       /* Shortened table list or OR-clause generation */
1982     Index *pCov = 0;             /* Potential covering index (or NULL) */
1983     int iCovCur = pParse->nTab++;  /* Cursor used for index scans (if any) */
1984 
1985     int regReturn = ++pParse->nMem;           /* Register used with OP_Gosub */
1986     int regRowset = 0;                        /* Register for RowSet object */
1987     int regRowid = 0;                         /* Register holding rowid */
1988     int iLoopBody = sqlite3VdbeMakeLabel(pParse);/* Start of loop body */
1989     int iRetInit;                             /* Address of regReturn init */
1990     int untestedTerms = 0;             /* Some terms not completely tested */
1991     int ii;                            /* Loop counter */
1992     u16 wctrlFlags;                    /* Flags for sub-WHERE clause */
1993     Expr *pAndExpr = 0;                /* An ".. AND (...)" expression */
1994     Table *pTab = pTabItem->pTab;
1995 
1996     pTerm = pLoop->aLTerm[0];
1997     assert( pTerm!=0 );
1998     assert( pTerm->eOperator & WO_OR );
1999     assert( (pTerm->wtFlags & TERM_ORINFO)!=0 );
2000     pOrWc = &pTerm->u.pOrInfo->wc;
2001     pLevel->op = OP_Return;
2002     pLevel->p1 = regReturn;
2003 
2004     /* Set up a new SrcList in pOrTab containing the table being scanned
2005     ** by this loop in the a[0] slot and all notReady tables in a[1..] slots.
2006     ** This becomes the SrcList in the recursive call to sqlite3WhereBegin().
2007     */
2008     if( pWInfo->nLevel>1 ){
2009       int nNotReady;                 /* The number of notReady tables */
2010       struct SrcList_item *origSrc;     /* Original list of tables */
2011       nNotReady = pWInfo->nLevel - iLevel - 1;
2012       pOrTab = sqlite3StackAllocRaw(db,
2013                             sizeof(*pOrTab)+ nNotReady*sizeof(pOrTab->a[0]));
2014       if( pOrTab==0 ) return notReady;
2015       pOrTab->nAlloc = (u8)(nNotReady + 1);
2016       pOrTab->nSrc = pOrTab->nAlloc;
2017       memcpy(pOrTab->a, pTabItem, sizeof(*pTabItem));
2018       origSrc = pWInfo->pTabList->a;
2019       for(k=1; k<=nNotReady; k++){
2020         memcpy(&pOrTab->a[k], &origSrc[pLevel[k].iFrom], sizeof(pOrTab->a[k]));
2021       }
2022     }else{
2023       pOrTab = pWInfo->pTabList;
2024     }
2025 
2026     /* Initialize the rowset register to contain NULL. An SQL NULL is
2027     ** equivalent to an empty rowset.  Or, create an ephemeral index
2028     ** capable of holding primary keys in the case of a WITHOUT ROWID.
2029     **
2030     ** Also initialize regReturn to contain the address of the instruction
2031     ** immediately following the OP_Return at the bottom of the loop. This
2032     ** is required in a few obscure LEFT JOIN cases where control jumps
2033     ** over the top of the loop into the body of it. In this case the
2034     ** correct response for the end-of-loop code (the OP_Return) is to
2035     ** fall through to the next instruction, just as an OP_Next does if
2036     ** called on an uninitialized cursor.
2037     */
2038     if( (pWInfo->wctrlFlags & WHERE_DUPLICATES_OK)==0 ){
2039       if( HasRowid(pTab) ){
2040         regRowset = ++pParse->nMem;
2041         sqlite3VdbeAddOp2(v, OP_Null, 0, regRowset);
2042       }else{
2043         Index *pPk = sqlite3PrimaryKeyIndex(pTab);
2044         regRowset = pParse->nTab++;
2045         sqlite3VdbeAddOp2(v, OP_OpenEphemeral, regRowset, pPk->nKeyCol);
2046         sqlite3VdbeSetP4KeyInfo(pParse, pPk);
2047       }
2048       regRowid = ++pParse->nMem;
2049     }
2050     iRetInit = sqlite3VdbeAddOp2(v, OP_Integer, 0, regReturn);
2051 
2052     /* If the original WHERE clause is z of the form:  (x1 OR x2 OR ...) AND y
2053     ** Then for every term xN, evaluate as the subexpression: xN AND z
2054     ** That way, terms in y that are factored into the disjunction will
2055     ** be picked up by the recursive calls to sqlite3WhereBegin() below.
2056     **
2057     ** Actually, each subexpression is converted to "xN AND w" where w is
2058     ** the "interesting" terms of z - terms that did not originate in the
2059     ** ON or USING clause of a LEFT JOIN, and terms that are usable as
2060     ** indices.
2061     **
2062     ** This optimization also only applies if the (x1 OR x2 OR ...) term
2063     ** is not contained in the ON clause of a LEFT JOIN.
2064     ** See ticket http://www.sqlite.org/src/info/f2369304e4
2065     */
2066     if( pWC->nTerm>1 ){
2067       int iTerm;
2068       for(iTerm=0; iTerm<pWC->nTerm; iTerm++){
2069         Expr *pExpr = pWC->a[iTerm].pExpr;
2070         if( &pWC->a[iTerm] == pTerm ) continue;
2071         testcase( pWC->a[iTerm].wtFlags & TERM_VIRTUAL );
2072         testcase( pWC->a[iTerm].wtFlags & TERM_CODED );
2073         if( (pWC->a[iTerm].wtFlags & (TERM_VIRTUAL|TERM_CODED))!=0 ) continue;
2074         if( (pWC->a[iTerm].eOperator & WO_ALL)==0 ) continue;
2075         testcase( pWC->a[iTerm].wtFlags & TERM_ORINFO );
2076         pExpr = sqlite3ExprDup(db, pExpr, 0);
2077         pAndExpr = sqlite3ExprAnd(pParse, pAndExpr, pExpr);
2078       }
2079       if( pAndExpr ){
2080         /* The extra 0x10000 bit on the opcode is masked off and does not
2081         ** become part of the new Expr.op.  However, it does make the
2082         ** op==TK_AND comparison inside of sqlite3PExpr() false, and this
2083         ** prevents sqlite3PExpr() from implementing AND short-circuit
2084         ** optimization, which we do not want here. */
2085         pAndExpr = sqlite3PExpr(pParse, TK_AND|0x10000, 0, pAndExpr);
2086       }
2087     }
2088 
2089     /* Run a separate WHERE clause for each term of the OR clause.  After
2090     ** eliminating duplicates from other WHERE clauses, the action for each
2091     ** sub-WHERE clause is to to invoke the main loop body as a subroutine.
2092     */
2093     wctrlFlags =  WHERE_OR_SUBCLAUSE | (pWInfo->wctrlFlags & WHERE_SEEK_TABLE);
2094     ExplainQueryPlan((pParse, 1, "MULTI-INDEX OR"));
2095     for(ii=0; ii<pOrWc->nTerm; ii++){
2096       WhereTerm *pOrTerm = &pOrWc->a[ii];
2097       if( pOrTerm->leftCursor==iCur || (pOrTerm->eOperator & WO_AND)!=0 ){
2098         WhereInfo *pSubWInfo;           /* Info for single OR-term scan */
2099         Expr *pOrExpr = pOrTerm->pExpr; /* Current OR clause term */
2100         int jmp1 = 0;                   /* Address of jump operation */
2101         assert( (pTabItem[0].fg.jointype & JT_LEFT)==0
2102              || ExprHasProperty(pOrExpr, EP_FromJoin)
2103         );
2104         if( pAndExpr ){
2105           pAndExpr->pLeft = pOrExpr;
2106           pOrExpr = pAndExpr;
2107         }
2108         /* Loop through table entries that match term pOrTerm. */
2109         ExplainQueryPlan((pParse, 1, "INDEX %d", ii+1));
2110         WHERETRACE(0xffff, ("Subplan for OR-clause:\n"));
2111         pSubWInfo = sqlite3WhereBegin(pParse, pOrTab, pOrExpr, 0, 0,
2112                                       wctrlFlags, iCovCur);
2113         assert( pSubWInfo || pParse->nErr || db->mallocFailed );
2114         if( pSubWInfo ){
2115           WhereLoop *pSubLoop;
2116           int addrExplain = sqlite3WhereExplainOneScan(
2117               pParse, pOrTab, &pSubWInfo->a[0], 0
2118           );
2119           sqlite3WhereAddScanStatus(v, pOrTab, &pSubWInfo->a[0], addrExplain);
2120 
2121           /* This is the sub-WHERE clause body.  First skip over
2122           ** duplicate rows from prior sub-WHERE clauses, and record the
2123           ** rowid (or PRIMARY KEY) for the current row so that the same
2124           ** row will be skipped in subsequent sub-WHERE clauses.
2125           */
2126           if( (pWInfo->wctrlFlags & WHERE_DUPLICATES_OK)==0 ){
2127             int iSet = ((ii==pOrWc->nTerm-1)?-1:ii);
2128             if( HasRowid(pTab) ){
2129               sqlite3ExprCodeGetColumnOfTable(v, pTab, iCur, -1, regRowid);
2130               jmp1 = sqlite3VdbeAddOp4Int(v, OP_RowSetTest, regRowset, 0,
2131                                           regRowid, iSet);
2132               VdbeCoverage(v);
2133             }else{
2134               Index *pPk = sqlite3PrimaryKeyIndex(pTab);
2135               int nPk = pPk->nKeyCol;
2136               int iPk;
2137               int r;
2138 
2139               /* Read the PK into an array of temp registers. */
2140               r = sqlite3GetTempRange(pParse, nPk);
2141               for(iPk=0; iPk<nPk; iPk++){
2142                 int iCol = pPk->aiColumn[iPk];
2143                 sqlite3ExprCodeGetColumnOfTable(v, pTab, iCur, iCol,r+iPk);
2144               }
2145 
2146               /* Check if the temp table already contains this key. If so,
2147               ** the row has already been included in the result set and
2148               ** can be ignored (by jumping past the Gosub below). Otherwise,
2149               ** insert the key into the temp table and proceed with processing
2150               ** the row.
2151               **
2152               ** Use some of the same optimizations as OP_RowSetTest: If iSet
2153               ** is zero, assume that the key cannot already be present in
2154               ** the temp table. And if iSet is -1, assume that there is no
2155               ** need to insert the key into the temp table, as it will never
2156               ** be tested for.  */
2157               if( iSet ){
2158                 jmp1 = sqlite3VdbeAddOp4Int(v, OP_Found, regRowset, 0, r, nPk);
2159                 VdbeCoverage(v);
2160               }
2161               if( iSet>=0 ){
2162                 sqlite3VdbeAddOp3(v, OP_MakeRecord, r, nPk, regRowid);
2163                 sqlite3VdbeAddOp4Int(v, OP_IdxInsert, regRowset, regRowid,
2164                                      r, nPk);
2165                 if( iSet ) sqlite3VdbeChangeP5(v, OPFLAG_USESEEKRESULT);
2166               }
2167 
2168               /* Release the array of temp registers */
2169               sqlite3ReleaseTempRange(pParse, r, nPk);
2170             }
2171           }
2172 
2173           /* Invoke the main loop body as a subroutine */
2174           sqlite3VdbeAddOp2(v, OP_Gosub, regReturn, iLoopBody);
2175 
2176           /* Jump here (skipping the main loop body subroutine) if the
2177           ** current sub-WHERE row is a duplicate from prior sub-WHEREs. */
2178           if( jmp1 ) sqlite3VdbeJumpHere(v, jmp1);
2179 
2180           /* The pSubWInfo->untestedTerms flag means that this OR term
2181           ** contained one or more AND term from a notReady table.  The
2182           ** terms from the notReady table could not be tested and will
2183           ** need to be tested later.
2184           */
2185           if( pSubWInfo->untestedTerms ) untestedTerms = 1;
2186 
2187           /* If all of the OR-connected terms are optimized using the same
2188           ** index, and the index is opened using the same cursor number
2189           ** by each call to sqlite3WhereBegin() made by this loop, it may
2190           ** be possible to use that index as a covering index.
2191           **
2192           ** If the call to sqlite3WhereBegin() above resulted in a scan that
2193           ** uses an index, and this is either the first OR-connected term
2194           ** processed or the index is the same as that used by all previous
2195           ** terms, set pCov to the candidate covering index. Otherwise, set
2196           ** pCov to NULL to indicate that no candidate covering index will
2197           ** be available.
2198           */
2199           pSubLoop = pSubWInfo->a[0].pWLoop;
2200           assert( (pSubLoop->wsFlags & WHERE_AUTO_INDEX)==0 );
2201           if( (pSubLoop->wsFlags & WHERE_INDEXED)!=0
2202            && (ii==0 || pSubLoop->u.btree.pIndex==pCov)
2203            && (HasRowid(pTab) || !IsPrimaryKeyIndex(pSubLoop->u.btree.pIndex))
2204           ){
2205             assert( pSubWInfo->a[0].iIdxCur==iCovCur );
2206             pCov = pSubLoop->u.btree.pIndex;
2207           }else{
2208             pCov = 0;
2209           }
2210 
2211           /* Finish the loop through table entries that match term pOrTerm. */
2212           sqlite3WhereEnd(pSubWInfo);
2213           ExplainQueryPlanPop(pParse);
2214         }
2215       }
2216     }
2217     ExplainQueryPlanPop(pParse);
2218     pLevel->u.pCovidx = pCov;
2219     if( pCov ) pLevel->iIdxCur = iCovCur;
2220     if( pAndExpr ){
2221       pAndExpr->pLeft = 0;
2222       sqlite3ExprDelete(db, pAndExpr);
2223     }
2224     sqlite3VdbeChangeP1(v, iRetInit, sqlite3VdbeCurrentAddr(v));
2225     sqlite3VdbeGoto(v, pLevel->addrBrk);
2226     sqlite3VdbeResolveLabel(v, iLoopBody);
2227 
2228     if( pWInfo->nLevel>1 ){ sqlite3StackFree(db, pOrTab); }
2229     if( !untestedTerms ) disableTerm(pLevel, pTerm);
2230   }else
2231 #endif /* SQLITE_OMIT_OR_OPTIMIZATION */
2232 
2233   {
2234     /* Case 6:  There is no usable index.  We must do a complete
2235     **          scan of the entire table.
2236     */
2237     static const u8 aStep[] = { OP_Next, OP_Prev };
2238     static const u8 aStart[] = { OP_Rewind, OP_Last };
2239     assert( bRev==0 || bRev==1 );
2240     if( pTabItem->fg.isRecursive ){
2241       /* Tables marked isRecursive have only a single row that is stored in
2242       ** a pseudo-cursor.  No need to Rewind or Next such cursors. */
2243       pLevel->op = OP_Noop;
2244     }else{
2245       codeCursorHint(pTabItem, pWInfo, pLevel, 0);
2246       pLevel->op = aStep[bRev];
2247       pLevel->p1 = iCur;
2248       pLevel->p2 = 1 + sqlite3VdbeAddOp2(v, aStart[bRev], iCur, addrHalt);
2249       VdbeCoverageIf(v, bRev==0);
2250       VdbeCoverageIf(v, bRev!=0);
2251       pLevel->p5 = SQLITE_STMTSTATUS_FULLSCAN_STEP;
2252     }
2253   }
2254 
2255 #ifdef SQLITE_ENABLE_STMT_SCANSTATUS
2256   pLevel->addrVisit = sqlite3VdbeCurrentAddr(v);
2257 #endif
2258 
2259   /* Insert code to test every subexpression that can be completely
2260   ** computed using the current set of tables.
2261   **
2262   ** This loop may run between one and three times, depending on the
2263   ** constraints to be generated. The value of stack variable iLoop
2264   ** determines the constraints coded by each iteration, as follows:
2265   **
2266   ** iLoop==1: Code only expressions that are entirely covered by pIdx.
2267   ** iLoop==2: Code remaining expressions that do not contain correlated
2268   **           sub-queries.
2269   ** iLoop==3: Code all remaining expressions.
2270   **
2271   ** An effort is made to skip unnecessary iterations of the loop.
2272   */
2273   iLoop = (pIdx ? 1 : 2);
2274   do{
2275     int iNext = 0;                /* Next value for iLoop */
2276     for(pTerm=pWC->a, j=pWC->nTerm; j>0; j--, pTerm++){
2277       Expr *pE;
2278       int skipLikeAddr = 0;
2279       testcase( pTerm->wtFlags & TERM_VIRTUAL );
2280       testcase( pTerm->wtFlags & TERM_CODED );
2281       if( pTerm->wtFlags & (TERM_VIRTUAL|TERM_CODED) ) continue;
2282       if( (pTerm->prereqAll & pLevel->notReady)!=0 ){
2283         testcase( pWInfo->untestedTerms==0
2284             && (pWInfo->wctrlFlags & WHERE_OR_SUBCLAUSE)!=0 );
2285         pWInfo->untestedTerms = 1;
2286         continue;
2287       }
2288       pE = pTerm->pExpr;
2289       assert( pE!=0 );
2290       if( (pTabItem->fg.jointype&JT_LEFT) && !ExprHasProperty(pE,EP_FromJoin) ){
2291         continue;
2292       }
2293 
2294       if( iLoop==1 && !sqlite3ExprCoveredByIndex(pE, pLevel->iTabCur, pIdx) ){
2295         iNext = 2;
2296         continue;
2297       }
2298       if( iLoop<3 && (pTerm->wtFlags & TERM_VARSELECT) ){
2299         if( iNext==0 ) iNext = 3;
2300         continue;
2301       }
2302 
2303       if( (pTerm->wtFlags & TERM_LIKECOND)!=0 ){
2304         /* If the TERM_LIKECOND flag is set, that means that the range search
2305         ** is sufficient to guarantee that the LIKE operator is true, so we
2306         ** can skip the call to the like(A,B) function.  But this only works
2307         ** for strings.  So do not skip the call to the function on the pass
2308         ** that compares BLOBs. */
2309 #ifdef SQLITE_LIKE_DOESNT_MATCH_BLOBS
2310         continue;
2311 #else
2312         u32 x = pLevel->iLikeRepCntr;
2313         if( x>0 ){
2314           skipLikeAddr = sqlite3VdbeAddOp1(v, (x&1)?OP_IfNot:OP_If,(int)(x>>1));
2315           VdbeCoverageIf(v, (x&1)==1);
2316           VdbeCoverageIf(v, (x&1)==0);
2317         }
2318 #endif
2319       }
2320 #ifdef WHERETRACE_ENABLED /* 0xffff */
2321       if( sqlite3WhereTrace ){
2322         VdbeNoopComment((v, "WhereTerm[%d] (%p) priority=%d",
2323                          pWC->nTerm-j, pTerm, iLoop));
2324       }
2325 #endif
2326       sqlite3ExprIfFalse(pParse, pE, addrCont, SQLITE_JUMPIFNULL);
2327       if( skipLikeAddr ) sqlite3VdbeJumpHere(v, skipLikeAddr);
2328       pTerm->wtFlags |= TERM_CODED;
2329     }
2330     iLoop = iNext;
2331   }while( iLoop>0 );
2332 
2333   /* Insert code to test for implied constraints based on transitivity
2334   ** of the "==" operator.
2335   **
2336   ** Example: If the WHERE clause contains "t1.a=t2.b" and "t2.b=123"
2337   ** and we are coding the t1 loop and the t2 loop has not yet coded,
2338   ** then we cannot use the "t1.a=t2.b" constraint, but we can code
2339   ** the implied "t1.a=123" constraint.
2340   */
2341   for(pTerm=pWC->a, j=pWC->nTerm; j>0; j--, pTerm++){
2342     Expr *pE, sEAlt;
2343     WhereTerm *pAlt;
2344     if( pTerm->wtFlags & (TERM_VIRTUAL|TERM_CODED) ) continue;
2345     if( (pTerm->eOperator & (WO_EQ|WO_IS))==0 ) continue;
2346     if( (pTerm->eOperator & WO_EQUIV)==0 ) continue;
2347     if( pTerm->leftCursor!=iCur ) continue;
2348     if( pLevel->iLeftJoin ) continue;
2349     pE = pTerm->pExpr;
2350     assert( !ExprHasProperty(pE, EP_FromJoin) );
2351     assert( (pTerm->prereqRight & pLevel->notReady)!=0 );
2352     pAlt = sqlite3WhereFindTerm(pWC, iCur, pTerm->u.leftColumn, notReady,
2353                     WO_EQ|WO_IN|WO_IS, 0);
2354     if( pAlt==0 ) continue;
2355     if( pAlt->wtFlags & (TERM_CODED) ) continue;
2356     if( (pAlt->eOperator & WO_IN)
2357      && (pAlt->pExpr->flags & EP_xIsSelect)
2358      && (pAlt->pExpr->x.pSelect->pEList->nExpr>1)
2359     ){
2360       continue;
2361     }
2362     testcase( pAlt->eOperator & WO_EQ );
2363     testcase( pAlt->eOperator & WO_IS );
2364     testcase( pAlt->eOperator & WO_IN );
2365     VdbeModuleComment((v, "begin transitive constraint"));
2366     sEAlt = *pAlt->pExpr;
2367     sEAlt.pLeft = pE->pLeft;
2368     sqlite3ExprIfFalse(pParse, &sEAlt, addrCont, SQLITE_JUMPIFNULL);
2369   }
2370 
2371   /* For a LEFT OUTER JOIN, generate code that will record the fact that
2372   ** at least one row of the right table has matched the left table.
2373   */
2374   if( pLevel->iLeftJoin ){
2375     pLevel->addrFirst = sqlite3VdbeCurrentAddr(v);
2376     sqlite3VdbeAddOp2(v, OP_Integer, 1, pLevel->iLeftJoin);
2377     VdbeComment((v, "record LEFT JOIN hit"));
2378     for(pTerm=pWC->a, j=0; j<pWC->nTerm; j++, pTerm++){
2379       testcase( pTerm->wtFlags & TERM_VIRTUAL );
2380       testcase( pTerm->wtFlags & TERM_CODED );
2381       if( pTerm->wtFlags & (TERM_VIRTUAL|TERM_CODED) ) continue;
2382       if( (pTerm->prereqAll & pLevel->notReady)!=0 ){
2383         assert( pWInfo->untestedTerms );
2384         continue;
2385       }
2386       assert( pTerm->pExpr );
2387       sqlite3ExprIfFalse(pParse, pTerm->pExpr, addrCont, SQLITE_JUMPIFNULL);
2388       pTerm->wtFlags |= TERM_CODED;
2389     }
2390   }
2391 
2392   return pLevel->notReady;
2393 }
2394